SUSE-RU-2018:0305-1: moderate: Recommended update for openattic

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for openattic
______________________________________________________________________________

Announcement ID:    SUSE-RU-2018:0305-1
Rating:             moderate
References:         #1062579 #1063807 #1064194 #1064611 #1064620 
                    #1064628 #1064651 #1066367 #1066499 #1066962 
                    #1067031 #1067407 #1068526 #1069545 
Affected Products:
                    SUSE Enterprise Storage 5
______________________________________________________________________________

   An update that has 14 recommended fixes can now be
   installed.

Description:


   This update for openattic fixes the following issues:

   - Update to upstream version 3.6.1
   - this version requires DeepSea version 0.8.2
   - fix bsc#1064651 - openAttic: Django SECRET_KEY generated using
     insufficient entropy (OP-2874)
   - fix bsc#1066499 - OA: slow to display the "RBD" page (OP-2688)
   - fix bsc#1064194 - unable to delete RBD images in oA (OP-2742)
   - fix bsc#1062579 - "No API response" error when creating new iSCSI target
     - however, job done OK (OP-2788)
   - fix bsc#1063807 - Add a timestamp of last update on the dashboard
     (OP-2837)
   - fix bsc#1064611 - openAttic session cookie excessive lifetime of 2 weeks
     (Django default) (OP-2872)
   - fix bsc#1064628 - openAttic: world-readable Django secret (OP-2873)
   - fix bsc#1066962 - openATTIC: error when creating multiple RGW users
     using the same email address (OP-2902)
   - fix bsc#1066367 - OA: Can't select the rbd image in the dialog of add
     iscsi export if there are more than 50 rbd images (OP-2907)
   - fix bsc#1067031 - Object Gateway does not provide endpoint address
     (OP-2908)
   - fix bsc#1067407 - Improve Object Gateway user/bucket filtering (OP-2912)
   - fix bsc#1068526 - Adding an iSCSI target in one iSCSI gateway causes the
     lrbd service to restart all iSCSI targets (OP-2926)
   - fix bsc#1069545 - Removed lock-file /var/lock/openattic from package
     (OP-2946)
   - fix bsc#1064620 - openAttic: world-readable /etc/sysconfig/openattic may
     leak credentials (OP-2949)
   - Removed some superflouous SUSE version checks from the RPM spec file
   - See CHANGELOG for detailed changes


Patch Instructions:

   To install this SUSE Recommended Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Enterprise Storage 5:

      zypper in -t patch SUSE-Storage-5-2018-227=1

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Enterprise Storage 5 (noarch):

      openattic-3.6.1-2.6.10
      openattic-debugsource-3.6.1-2.6.10


References:

   https://bugzilla.suse.com/1062579
   https://bugzilla.suse.com/1063807
   https://bugzilla.suse.com/1064194
   https://bugzilla.suse.com/1064611
   https://bugzilla.suse.com/1064620
   https://bugzilla.suse.com/1064628
   https://bugzilla.suse.com/1064651
   https://bugzilla.suse.com/1066367
   https://bugzilla.suse.com/1066499
   https://bugzilla.suse.com/1066962
   https://bugzilla.suse.com/1067031
   https://bugzilla.suse.com/1067407
   https://bugzilla.suse.com/1068526
   https://bugzilla.suse.com/1069545