SUSE-OU-2019:0884-1: moderate: Optional update for golang-github-prometheus-node_exporter, golang-github-prometheus-prometheus, mgr-cfg, mgr-custom-info, mgr-daemon, mgr-osad, mgr-push, mgr-virtualization

sle-updates at lists.suse.com sle-updates at lists.suse.com
Thu Apr 4 19:12:02 MDT 2019


   SUSE Optional Update: Optional update for golang-github-prometheus-node_exporter, golang-github-prometheus-prometheus, mgr-cfg, mgr-custom-info, mgr-daemon, mgr-osad, mgr-push, mgr-virtualization
______________________________________________________________________________

Announcement ID:    SUSE-OU-2019:0884-1
Rating:             moderate
References:         #1015136 #1038483 #1039913 #1049936 #1064393 
                    #1073619 #1076201 #1082211 #1083294 #1087299 
                    #1090504 #1093529 #1103696 #1104034 #11040346 
                    #1115414 #1124610 #652676 #660789 #667924 
                    #669894 #672637 #672643 #678489 #679716 #681984 
                    #683075 #684390 #694028 #695946 #696294 #722052 
                    #764532 #764854 #766148 #776356 #776377 #786159 
                    #797057 #806202 #815460 #838509 #859541 #869888 
                    #871549 #872970 #895869 #900498 #901958 #915581 
                    #919433 #920897 #931503 #931685 #933738 #950372 
                    #970550 #980752 
Affected Products:
                    SUSE Manager Tools 15-BETA
______________________________________________________________________________

   An update that solves two vulnerabilities and has 56 fixes
   is now available.

Description:

   FIXME: update This update for golang-github-prometheus-node_exporter,
   golang-github-prometheus-prometheus, mgr-cfg, mgr-custom-info, mgr-daemon,
   mgr-osad, mgr-push, mgr-virtualization fixes the following issues:

   Changes in mgr-cfg, mgr-custom-info, mgr-daemon, mgr-osad, mgr-push,
   mgr-virtualization:

   - version 4.0.4-1
   - Sync with Spacewalk
   - make filemod more readable
   - 1665858 - diff expects string not bytes

   - version 4.0.3-1
   - Fix python2 compilation on openSUSE

   - version 4.0.2-1
   - use rpm for debian packaging

   - version 4.0.1-1
   - Bump version to 4.0.0 (bsc#11040346)
   - Rename package to mgr-cfg to allow version 4.0.0 (bsc#1104034)
   - Fix copyright for the package specfile (bsc#1103696)

   - version 5.10.122.2-1
   - format the file mode in unified way(bsc#1093529)

   - version 5.10.122.1-1
   - Sync with upstream (bsc#1083294)
   - Build python2 packages on SUSE systems

   - version 5.10.121.2-1
   - remove empty clean section from spec (bsc#1083294)

   - version 5.10.121.1-1
   - Sync with upstream

   - version 5.10.119.2-1
   - Improve webui for comparing files (bsc#1076201)

   - version 5.10.119.1-1
   - Fix update mechanism when updating the updateservice (bsc#1073619)
   - Add --config option to rhncfg-manager and rhncfg-client
   - Add better handling of interrupted system calls

   - version 5.10.117.1-1
   - rhncfg: add missing dirs to filelist

   - version 5.10.116.1-1
   - move files into proper python2/python3 subpackages
   - store output in the action file so partial output can arrive to server
   - print different message if file does not exist
   - print a name of file which does not exist during diff
   - tell user which file differs
   - add password config option to rhncfg-manager
   - execute remote commands in clean environment

   - version 5.10.103.2-1
   - Add password config option to rhncfg-manager.
   - require rhnlib version with i18n module (bsc#1038483)

   - version 5.10.103.1-1

   - version 5.10.102.2-1
   - fix missing import in rhncfg

   - version 5.10.102.1-1
   - Updated links to github in spec files
   - Symlink target overwritten when the symlink is replaced by a file
     managed by rhncfg-client
   - require spacewalk-usix indead of spacewalk-backend-usix

   - version 5.10.100.1-1
   - Version bump to 5.10.100

   - version 5.10.88.2-1
   - fix file permissions (bsc#970550)

   - version 5.10.88.1-1
   - fixing removing of temporary files during transaction rollback for
     rhncfg-manager.
   - fixing removing directories which rhncfg-manager didn't create.

   - version 5.10.87.1-1
   - python 2.4 compatibility
   - remove temporary files when exception occurs

   - version 5.10.85.1-1
   - make rhncfg support sha256 and use it by default
   - fix for assigning all groups user belongs to running process
   - show server modified time with rhncfg-client diff

   - version 5.10.65.11-1
   - fix config diff - Avoid addition of None and str (bsc#920897)

   - version 5.10.65.10-1
   - Normalize path sooner
   - Fix directory creation
   - Getting rid of Tabs and trailing spaces

   - version 5.10.65.9-1
   - fix compare config files by checking permissions on the correct file
     (bsc#900498)

   - version 5.10.65.8-1
   - fix errror in rhncfg if selinux off

   - version 5.10.65.7-1
   - validate the content of config files before deploying

   - sanitize release line in specfile

   - version 5.10.65.6-1
   - Avoid traceback with a configfiles upload action with no selinux context
   - make webui config dir diff work
   - ensure webui config file diff looks at owner and permissions
   - make sure webui doesn't say there are diffs if there aren't

   - version 5.10.65.5-1
   - list/elist: allow to specify list of files

   - version 5.10.65.4-1
   - fix for assigning all groups user belongs to running process

   - version 5.10.65.3-1
   - fix uncaught exception in config deploy (bsc#871549)

   - fix release in specfile for SLE12 (bsc#872970)

   - version 5.10.65.2-1
   - show server modified time with rhncfg-client diff

   - version 5.10.65.1-1
   - switch to 2.1

   - version 5.10.27.12-1
   - rhncfg-* --server-name now overwrites rhncfg-*.conf
   - unicode support for Remote Command scripts

   - version 5.10.27.11-1
   - make diffs initiated from another spacewalk server obey display_diff
     config option

   - version 5.10.27.10-1
   - simplify rhncfg API (bsc#815460)

   - version 5.10.27.9-1
   - Fix Web UI config diff, which always shows 'binary files differ'
   - make rhncfg diff output configurable

   - version 5.10.27.8-1
   - recompile python files only on SUSE

   - version 5.10.27.7-1
   - precompile python code to prevent verification issues (bsc#776356)
   - If there's symlink in file deployment path it will be created

   - version 5.10.27.6-1
   - check symlink not target file existence
   - value of selinux context is important

   - version 5.10.27.5-1

   - fixed insecure permissions used for /var/log/rhncfg-actions file
     CVE-2012-2679 (bsc#766148)

   - version 5.10.27.4-1
   - fixed command synopsis

   - version 5.10.27.3-1
   - honor rhncfg-specific settings

   - version 5.10.27.2-1
   - accept server name without protocol

   - version 5.10.27.1-1
   - Bumping package version

   - Adapt dependencies to renamed packages (bsc#722052)

   - do not require selinux on SLES10

   - fix staticmethod Syntax Error on systems with python < 2.4 (e.g. RHEL4)
     (bsc#694028)

   - fix usage documentation messages for topdir and dest-file (bsc#684390)

   - pulled a few commits from the master branch to fix bsc#679716 and a more
     general problem we had with uploading config files without a SELinux
     context

   - debrand rhncfg-manager (bsc#678489)

   - backport upstrem fixes

   - add mgr-* symlinks (BNC #660789)

   - fix %dir in filelist

   - don't ignore post-build-checks

   - fix post-build-checks

   - Initial release of rhncfg


   - version 4.0.2-1
   - Add Uyuni URL to package

   - version 4.0.1-1
   - Bump version to 4.0.0 (bsc#11040346)
   - Rename package to mgr-custom-info to allow version 4.0.0 (bsc#1104034)
   - Fix copyright for the package specfile (bsc#1103696)

   - version 5.4.43.2-1
   - remove empty clean section from spec (bsc#1083294)

   - version 5.4.43.1-1
   - Sync with upstream

   - version 5.4.41.1-1
   - build with python3 when needed

   - version 5.4.33.2-1
   - Updated links to github in spec files

   - version 5.4.33.1-1
   - Version bump to 5.4.33

   - version 5.4.28.1-1
   - Bump version

   - version 5.4.22.6-1
   - Getting rid of Tabs and trailing spaces

   - version 5.4.22.5-1

   - sanitize release line in specfile

   - version 5.4.22.4-1
   - rhn-custom-info fix man page

   - version 5.4.22.3-1

   - fix release in specfile for SLE12 (bsc#872970)

   - version 5.4.22.2-1
   - Don't print newline after 'Username:' prompt

   - version 5.4.22.1-1
   - Custom info with empty value added

   - version 5.4.21.1-1
   - switch to 2.1

   - version 5.4.14.1-1
   - Bumping package version

   - Fix specfile; don't require up2date on SLE

   - Symlink added.

   - Remove unneeded requirement to yum-rhn-plugin (bnc #667924)

   - tag strings which needs to be changed

   - Initial release of rhn-custom-info


   - version 4.0.3-1
   - Add missing timer file
   - Sync changes from Spacewalk
   - Regenerating .po and .pot files for rhnsd
   - Updating .po translations from Zanata
   - 1091025 - Languages are not needed on systemd
   - 1091025 - Make package noarch on systemd systems
   - 1091025 - Fix building
   - 1091025 - Replace rhnsd with systemd.tim

   - version 4.0.2-1
   - use rpm for debian packaging

   - version 4.0.1-1
   - Bump version to 4.0.0 (bsc#11040346)
   - Rename package to mgr-daemon to allow version 4.0.0 (bsc#1104034)
   - Fix copyright for the package specfile (bsc#1103696)

   - version 5.0.37.1-1
   - Sync with upstream (bsc#1083294)
   - Updating .po translations from Zanata

   - version 5.0.36.2-1
   - remove empty clean section from spec (bsc#1083294)

   - version 5.0.36.1-1
   - Cleanup specfiles

   - version 5.0.33.2-1
   - Fix update mechanism when updating the updateservice (bsc#1073619)

   - version 5.0.33.1-1
   - close and reopen syslog when redirecting child output
   - no insserv on available in newer distributions

   - version 5.0.26.3-1
   - Fix permissions of PID files in spacewalksd (bsc#1049936)

   - version 5.0.26.2-1
   - update changelog

   - version 5.0.19.2-1
   - use spacewalk-update-status only on registered systems (bsc#1015136)

   - version 5.0.19.1-1
   - delete file with input files after template is created
   - update translations

   - version 5.0.17.2-1
   - move name, version and release to the begin of the specfile

   - version 5.0.17.1-1
   - systemd ready

   - version 5.0.14.8-1
   - PIE+RELRO for rhnsd

   - version 5.0.14.7-1
   - install new service and enable it (bsc#919433)
   - add service spacewalk-update-status (bsc#919433)

   - version 5.0.14.6-1
   - Getting rid of Tabs and trailing spaces

   - version 5.0.14.5-1

   - sanitize release line in specfile

   - version 5.0.14.4-1

   - fix release in specfile for SLE12 (bsc#872970)

   - version 5.0.14.3-1
   - call find_lang after removal of unsupported translations
   - remove unsupported translations and fix rc link

   - version 5.0.14.2-1
   - use correct rc link
   - support systemd for SLE12
   - change license to SPDX format

   - version 5.0.14.1-1
   - cleaning up old svn Ids
   - rebranding few more strings in client stuff
   - switch to 2.1

   - version 4.9.15.3-1
   - do not start rhnsd in runlevel 2 which has no network
   - call rhn-update-status only is exists and is executable
   - call rhn-update-status at start to provide current uptime to server

   - version 4.9.15.2-1
   - no use of /var/lock/subsys/ anymore

   - version 4.9.15.1-1
   - Bumping package version

   - remove all unsupported translations

   - Adapt dependencies to renamed packages (bsc#722052)

   - Fix specfile to build on SLES10.

   - debrand startup message (bsc#672637)

   - add rc link (bsc#669894)

   - Fix rpm scripts failing if system is not registered (bsc#652676)

   - fix specfile
   - add Obsoletes: old name

   - rename to spacewalksd

   - fix missing rhnsd.init.SUSE

   - cleanup specfile: remove excessive *init.SUSE Source statement

   - fix post-build-checks

   - Initial release of rhnsd


   - version 4.0.5-1
   - Final fixes to make osa-dispatcher compatible with python3

   - version 4.0.4-1
   - Require correct python version for osa-dispatcher

   - version 4.0.3-1
   - Change dependencies for subpackages to python2-mgr-osa-*
     python3-mgr-osa-* and mgr-osa-* (bsc#1104034)

   - version 4.0.2-1
   - Fix SPEC issue for subpackage mgr-osa-dispatcher-selinux (bsc#11040346)

   - version 4.0.1-1
   - Bump version to 4.0.0 (bsc#11040346)
   - Rename package to mgr-osad to allow version 4.0.0 (bsc#1104034)
   - Fix copyright for the package specfile (bsc#1103696)

   - version 5.11.102.2-1
   - use full package name python-jabberpy as dependency (bsc#1087299)

   - version 5.11.102.1-1
   - Sync with upstream (bsc#1083294)
   - Remove osad files when packaging only for python3
   - Run osa-dispatcher on python3 when possible

   - version 5.11.100.2-1
   - remove clean section from spec (bsc#1083294)

   - version 5.11.100.1-1
   - remove unused python-xml requirement (bsc#1082211)

   - version 5.11.98.2-1
   - Fix update mechanism when updating the updateservice (bsc#1073619)

   - version 5.11.98.1-1
   - add missing directory to filelist

   - version 5.11.97.1-1
   - splitinto python2/python3 specific packages
   - Fixed TypeError for force flag in setup_config that could happen when
     jabberd restart was needed. (bsc#1064393)

   - version 5.11.80.3-1
   - reduce maximal size of osad log before rotating
   - perform osad restart in posttrans (bsc#1039913)

   - version 5.11.80.2-1
   - require rhnlib version with i18n module (bsc#1038483)

   - version 5.11.80.1-1
   - Updated links to github in spec files
   - fix TypeError: descriptor 'with_traceback'
   - remove running rhn_check on osad start
   - require spacewalk-usix indead of spacewalk-backend-usix
   - fix osa_dispatcher so it can successfully register with jabberd

   - version 5.11.77.1-1
   - Align with upstream versioning

   - version 5.11.76.1-1
   - Initial submission for Manager-3.1

   - version 5.11.64.3-1
   - fix logfile option for osa-dispatcher (bsc#980752)

   - version 5.11.64.2-1
   - fix file permissions (bsc#970550)

   - version 5.11.64.1-1
   - Add possibility for OSAD to work in failover mode

   - version 5.11.63.2-1
   - set osa-dispatcher notify_threshold to 100 as default

   - version 5.11.63.1-1
   - fix TypeError: unbound method set_jabber_connection()

   - version 5.11.62.1-1
   - Bump version

   - version 5.11.33.10-1
   - osad: re-send subscription stanzas after a while (bsc#933738)

   - version 5.11.33.9-1
   - fix duplicate jabber ids (bsc#869888, bsc#931685)
   - improve error logging

   - version 5.11.33.8-1
   - Apply needed SElinux fix for RHEL7 and make use of systemd unit files
   - introduce notify_threshold for osa-dispatcher (bsc#915581)
   - really check for action type reboot

   - version 5.11.33.7-1
   - Getting rid of Tabs and trailing spaces

   - version 5.11.33.6-1
   - removed PyXML dependency for RHEL systems
   - fix osad through unauthenticated proxy case

   - version 5.11.33.5-1
   - enable and install osad during first installation (bsc#901958)

   - sanitize release line in specfile

   - version 5.11.33.4-1
   - osad: fix traceback if http proxy is not configured
   - osad: support communication over proxy

   - version 5.11.33.3-1
   - Call python using the -s option

   - version 5.11.33.2-1

   - fix release in specfile for SLE12 (bsc#872970)

   - version 5.11.33.1-1
   - create rc links on SUSE distributions
   - make reboot_in_progress a public function (bsc#859541)

   - version 5.11.32.2-1
   - do not notify osad of a server which reboot is in progress (FATE#312591)

   - version 5.11.32.1-1
   - switch to 2.1

   - version 5.10.41.10-1
   - remove extraneous 'except'
   - catch jabberd connection errors

   - version 5.10.41.9-1
   - require python-xml on SLE11 (bsc#838509)

   - version 5.10.41.8-1
   - always commit the update

   - version 5.10.41.7-1
   - osad requires config.getServerURL()

   - version 5.10.41.6-1
   - recompile python files only on SUSE

   - version 5.10.41.5-1
   - Set owner/group of config-defaults dir consistently (bsc#776377)
   - recompile python files (bsc#776356)

   - version 5.10.41.4-1
   - no use of /var/lock/subsys/ anymore

   - version 5.10.41.3-1
   - rotate osa-dispatcher logfiles at 10M

   - version 5.10.41.2-1
   - prevent 'notifying clients' starvation
   - Make osa-dispatcher use the hostname in the rhn.conf if present

   - osa-dispatcher: rotate logfiles as user www (bsc#681984) CVE-2011-1550

   - version 5.10.41.1-1
   - Bumping package version

   - changed permissions of /etc/rhn

   - enable and start osad during installation (FATE#312379)

   - start osa-dispatcher after oracle DB

   - fix some imports after moving modules out of spacewalk.common

   - require python-hashlib for SLE10

   - ensure presence subscription works with standard jabberd
     setup.(bsc#695946)

   - add rc links (bsc#669894)

   - fix build on RH4

   - backport upstrem fixes

   - fix macros

   - fix missing prog.init.SUSE

   - cleanup specfile: remove excessive *init.SUSE Source statement

   - fix post-build-checks

   - Initial release of osad


   - version 4.0.3-1
   - Fix dependencies to spacewalk-backend-libs

   - version 4.0.2-1
   - Add Uyuni URL to package

   - version 4.0.1-1
   - Bump version to 4.0.0 (bsc#11040346)
   - Rename package to mgr-push to allow version 4.0.0 (bsc#1104034)
   - Fix copyright for the package specfile (bsc#1103696)

   - version 5.5.113.2-1
   - Sync with upstream (bsc#1083294)
   - rhnpush is needed on python2 due to spacewalk-proxy

   - version 5.5.113.1-1
   - Sync with upstream (bsc#1083294)
   - Build python2 on SUSE

   - version 5.5.111.2-1
   - remove empty clean section from spec (bsc#1083294)

   - version 5.5.111.1-1
   - Sync with upstream

   - version 5.5.108.1-1
   - move rhnpush files into proper python2/python3 subpackages

   - version 5.5.104.3-1
   - disable pylint check during build also for RHEL7

   - version 5.5.104.2-1
   - fixed pylint warnings disabled python3 pylint on Fedora 26+ for now
   - removed outdated solaris2mpm script

   - version 5.5.104.1-1
   - Pylint fixes in rhnpush

   - version 5.5.102.1-1
   - Updated links to github in spec files
   - require spacewalk-usix indead of spacewalk-backend-usix

   - version 5.5.101.1-1
   - Version 5.5.101-1

   - version 5.5.91.2-1
   - don't count on having newest rhn-client-tools

   - version 5.5.91.1-1
   - alow to use existing rpcServer when creating RhnServer

   - version 5.5.90.1-1
   - rhn-satellite-activate: manual references removed

   - version 5.5.89.1-1
   - Wire in timeout for rhnpush

   - version 5.5.71.8-1
   - fix --ca-chain option for rhnpush (bsc#931503, bsc#895869)

   - version 5.5.71.7-1
   - Getting rid of Tabs and trailing spaces

   - version 5.5.71.6-1
   - rhnpush: fix pylint checks and code quality

   - sanitize release line in specfile

   - version 5.5.71.5-1
   - Add default path structure to proxy lookaside that avoids collisions
   - Make rhnpush backwards-compatible with old spacewalk-proxy

   - version 5.5.71.4-1

   - fix release in specfile for SLE12 (bsc#872970)

   - version 5.5.71.3-1
   - correcting exception type

   - version 5.5.71.2-1
   - use SUSE package name in requires
   - pylint check only on SLE11

   - version 5.5.71.1-1
   - switch to 2.1

   - version 5.5.42.7-1
   - code cleanup
   - fixed man page
   - removed dead --no-cache option
   - fixed --no-session-caching option

   - version 5.5.42.6-1
   - solaris2mpm on RHEL5 is not supported
   - solaris2mpm needs zipfile with ZIP64 extension
   - remove trailing '/' from from archive dir
   - reuse UploadError from uploadLib
   - simplified authentication code

   - version 5.5.42.5-1
   - removed commented out code and obsoleted comments

   - version 5.5.42.4-1
   - add COPYING file (bsc#764854)

   - version 5.5.42.3-1
   - Use the correct a_pkg variable.

   - version 5.5.42.2-1
   - removed unused get_header_struct_size()
   - removed unused function get_header_byte_range()

   - version 5.5.42.1-1
   - Bumping package version

   - add missing "import string" (bsc#672643)

   - fix build: create symlink only after binary has been installed

   - rename "Red Hat Network" to "SUSE Manager" for SUSE (bsc#672643)
   - add mgrpush symlink (bsc#672643)

   - fix build for RH4

   - tag strings which needs changes
   - fix Requires line in spec

   - fix post-build-checks

   - Initial release of rhnpush


   - version 4.0.3-1
   - convert poller to systemd timer (bsc#1115414)

   - version 4.0.2-1
   - Fix Obsolete/Provides for subpackage python2-mgr-virtualization-host
     (bsc#1104034)

   - version 4.0.1-1
   - Bump version to 4.0.0 (bsc#11040346)
   - Rename package to mgr-virtualization to allow version 4.0.0 (bsc#1104034)
   - Fix copyright for the package specfile (bsc#1103696)

   - version 5.4.72.2-1
   - Remove SUSE Studio based image deployments (bsc#1090504)

   - version 5.4.72.1-1
   - Sync with upstream (bsc#1083294)
   - Build python2 packages on SUSE systems

   - version 5.4.71.2-1
   - remove empty clean section from spec (bsc#1083294)

   - version 5.4.71.1-1
   - Sync with upstream

   - version 5.4.69.1-1
   - simplify status check
   - open cache file in binary mode
   - fixing traceback from poller.py on Python 3
   - fixing a bytes-like object is required, not 'str'

   - version 5.4.64.1-1
   - move files into proper python2/python3 subpackages

   - version 5.4.57.1-1
   - Updated links to github in spec files
   - require spacewalk-usix indead of spacewalk-backend-usix

   - version 5.4.56.1-1
   - Version 5.4.56-1

   - version 5.4.55.2-1
   - fix guest report of virtual hosts (bsc#950372)

   - version 5.4.55.1-1
   - Bump version

   - version 5.4.50.5-1
   - Getting rid of Tabs and trailing spaces

   - version 5.4.50.4-1

   - sanitize release line in specfile

   - version 5.4.50.3-1
   - some systems to not have /sbin in path
   - service location is not platform independent
   - rhn-virt-host should not spam root if libvirtd is stopped

   - version 5.4.50.2-1

   - fix release in specfile for SLE12 (bsc#872970)

   - version 5.4.50.1-1
   - switch to 2.1

   - version 5.4.34.13-1
   - python 2.4 fix for 'exit'
   - define a utf8_encode wrapper

   - version 5.4.34.12-1
   - isInstallerConfig should check for autoyast in commandline
   - catch libvirtError to return meaningfull error messages
   - remove wrong kernel and initrd pathes from config
   - Fix deployment of vmdk studio images (bsc#806202)

   - version 5.4.34.11-1
   - rhn-virtualization-host needs to consistantly use the new function
     definition
   - support studio KVM image type (bsc#797057)

   - version 5.4.34.10-1
   - fix invalid return value in image deployment (bsc#786159)

   - version 5.4.34.9-1
   - rhn-profile-sync exits with status 1 if libvirtd is not running

   - version 5.4.34.8-1
   - fix typo in type checking

   - version 5.4.34.7-1
   - better support VirtualBox using listDefinedDomains in poller tool

   - version 5.4.34.6-1
   - Support for studio image deployments, upstream integration

   - version 5.4.34.5-1
   - requires python-pycurl on redhat/fedora now
   - remove debugging code

   - version 5.4.34.4-1
   - fixed proxySettings for image fetching

   - packaging of config file fixed

   - version 5.4.34.3-1
   - no use of /var/lock/subsys/ anymore

   - added generate_uuid to utils.py
   - inegrated upstream feedback to studio integration (bsc#764532)

   - version 5.4.34.2-1
   - rhn-virtualization-host should not delete chkconfig settings on upgrade

   - version 5.4.34.1-1
   - Bumping package version

   - Add support for studio image deployments

   - Adapt dependencies to renamed packages (bsc#722052)

   - Status of Virtual Machines is not properly recognized (bsc#683075)

   - catch an exception when libvirtd is not running (bsc#696294)

   - add missing dir

   - add rc link (bsc#669894)

   - change strings in init script

   - don't ignore post-build-checks

   - move SuSE specific init script to scripts to make tito happy

   - fix post-build-checks

   - Initial release of rhn-virtualization

   Changes in golang-github-prometheus-node_exporter,
   golang-github-prometheus-prometheus:
   - Update to 0.17.0
     + includes breaking changes
     + supvervisord collector reports start_time_seconds rather than uptime
     + The wifi collector is disabled by default due to suspected caching
       issues and goroutine leaks See
       https://github.com/prometheus/node_exporter/releases/tag/v0.17.0 for
       full changelog

   - Update to 0.16.0
     + includes breaking changes
     + several metrics renamed
     + split out cpu guest metrics See
       https://github.com/prometheus/node_exporter/releases/tag/v0.16.0 for
       full changelog

   - fix spec file: actually ship promtool

   - Update to 2.7.1:
     + Bug Fixes:
       * Fix a Stored DOM XSS vulnerability with query history (bsc#1124610)
       * prometheus_rule_group_last_duration_seconds now reports seconds
         instead of nanoseconds
       * Make sure the targets are consistently sorted in the targets page
   - Update to 2.7.0:
     + cli flag depreacted: storage.tsdb.retention use
       storage.tsdb.retention.time instead; depreacted flag will be removed
       in 3.0
     + Features:
       * Add subqueries to PromQL
       * Add support for disk size based retention. Note that we don't
         consider the WAL size which could be significant and the time based
         retention policy also applies (experimental)
       * Add CORS origin flag
     + Bug Fixes:
       * Don't depend on given order when comparing samples in alert unit
         testing
       * Make sure the retention period doesn't overflow
       * Don't generate blocks with no samples
   - Update to 2.6.0:
     + Remove default flags from the container's entrypoint, run Prometheus
       from /etc/prometheus and symlink the storage directory to
       /etc/prometheus/data
     + Promtool: Remove the update command
     + Features:
       * Add JSON log format via the --log.format flag
       * API: Add /api/v1/labels endpoint to get all label names
       * Web: Allow setting the page's title via the --web.ui-title flag
     + Enhancements:
       * Add prometheus_tsdb_lowest_timestamp_seconds,
         prometheus_tsdb_head_min_time_seconds and
         prometheus_tsdb_head_max_time_seconds metrics
       * Add rule_group_last_evaluation_timestamp_seconds metric
       * Add prometheus_template_text_expansion_failures_total and
         prometheus_template_text_expansions_total metrics
       * Set consistent User-Agent header in outgoing requests
       * Azure SD: Error out at load time when authentication parameters are
         missing
       * EC2 SD: Add the machine's private DNS name to the discovery metadata
       * EC2 SD: Add the operating system's platform to the discovery metadata
       * Kubernetes SD: Add the pod's phase to the discovery metadata
       * Kubernetes SD: Log Kubernetes messages
       * Promtool: Collect CPU and trace profiles
       * Promtool: Support writing output as JSON
       * Remote Read: Return available data if remote read fails partially
       * Remote Write: Improve queue performance
       * Remote Write: Add min_shards parameter to set the minimum number of
         shards
       * TSDB: Improve WAL reading
       * TSDB: Memory improvements
       * Web: Log stack traces on panic
       * Web UI: Add copy to clipboard button for configuration
       * Web UI: Support console queries at specific times
       * Web UI: group targets by job then instance
     + Bug Fixes:
       * Deduplicate handler labels for HTTP metrics
       * Fix leaked queriers causing shutdowns to hang
       * Fix configuration loading panics on nil pointer slice elements
       * API: Correctly skip mismatching targets on /api/v1/targets/metadata
       * API: Better rounding for incoming query timestamps
       * Discovery: Remove all targets when the scrape configuration gets
         empty
       * PromQL: Fix a goroutine leak in the lexer/parser
       * Scrape: Fix deadlock in the scrape's manager
       * Scrape: Scrape targets at fixed intervals even after Prometheus
         restarts
       * TSDB: Support restored snapshots including the head properly
       * TSDB: Repair WAL when the last record in a segment is torn
   - Update to 2.5.0
     + Group targets by scrape config instead of job name
     + Marathon SD: Various changes to adapt to Marathon 1.5+
     + Discovery: Split prometheus_sd_discovered_targets metric by scrape and
       notify (Alertmanager SD) as well as by section in the respective
       configuration
     + Enhancements:
       * Support s390x platform for Linux
       * API: Add prometheus_api_remote_read_queries metric tracking
         currently executed or waiting remote read API requests
       * Remote Read: Add prometheus_remote_storage_remote_read_queries
         metric tracking currently in-flight remote read queries
       * Remote Read: Reduced memory usage
       * Discovery: Add prometheus_sd_discovered_targets,
         prometheus_sd_received_updates_total,
         prometheus_sd_updates_delayed_total, and prometheus_sd_updates_total
         metrics for discovery subsystem
       * Discovery: Improve performance of previously slow updates of changes
         of targets
       * Kubernetes SD: Add extended metrics
       * OpenStack SD: Support discovering instances from all projects
       * OpenStack SD: Discover all interfaces
       * OpenStack SD: Support tls_config for the used HTTP client
       * Triton SD: Add ability to filter triton_sd targets by pre-defined
         groups
       * Web UI: Avoid browser spell-checking in expression field
       * Web UI: Add scrape duration and last evaluation time in targets and
         rules pages
       * Web UI: Improve rule view by wrapping lines
       * Rules: Error out at load time for invalid templates, rather than at
         evaluation time
     + Bug Fixes:
       * Change max/min over_time to handle NaNs properly
       * Check label name for count_values PromQL function
       * Ensure that vectors and matrices do not contain identical label-sets
   - Update to 2.4.3
     + Bug Fixes: [BUGFIX] Fix panic when using custom EC2 API for SD #4672
       [BUGFIX] Fix panic when Zookeeper SD cannot connect to servers #4669
       [BUGFIX] Make the skip_head an optional parameter for snapshot API
       #4674
   - Update to 2.4.2
     + Bug Fixes: [BUGFIX] Handle WAL corruptions properly
       prometheus/tsdb#389 [BUGFIX] Handle WAL migrations correctly on
       Windows prometheus/tsdb#392
   - Update to 2.4.1
     + New TSDB metrics
     + Bug Fixes: Render UI correctly for Windows
   - Update to 2.4.0
     + The WAL implementation has been re-written so the storage is not
       forward compatible. Prometheus 2.3 storage will work on 2.4 but not
       vice-versa
     + Reduce remote write default retries
     + Remove /heap endpoint
     + Features:
       * Persist alert 'for' state across restarts
       * Add API providing per target metric metadata
       * Add API providing recording and alerting rules
     + Enhancements:
       * Brand new WAL implementation for TSDB. Forwards incompatible with
         previous WAL.
       * Show rule evaluation errors in UI
       * Throttle resends of alerts to Alertmanager
       * Send EndsAt along with the alert to Alertmanager
       * Limit the samples returned by remote read endpoint
       * Limit the data read in through remote read
       * Coalesce identical SD configuations
       * promtool: Add new commands for debugging and querying
       * Update console examples for node_exporter v0.16.0
       * Optimize PromQL aggregations
       * Remote read: Add Offset to hints
       * consul_sd: Add support for ServiceMeta field
       * ec2_sd: Maintain order of subnet_id label
       * ec2_sd: Add support for custom endpoint to support EC2 compliant APIs
       * ec2_sd: Add instance_owner label
       * azure_sd: Add support for VMSS discovery and multiple environments
       * gce_sd: Add instance_id label
       * Forbid rule-abiding robots from indexing
       * Log virtual memory limits on startup
     + Bug Fixes:
       * Wait for service discovery to stop before exiting
       * Render SD configs properly
       * Only add LookbackDelta to vector selectors
       * ec2_sd: Handle panic-ing nil pointer
       * consul_sd: Stop leaking connections
       * Use templated labels also to identify alerts
       * Reduce floating point errors in stddev and related functions
       * Log errors while encoding responses
   - Update to 2.3.2
     + Bug Fixes:
       * Fix various tsdb bugs
       * Reorder startup and shutdown to prevent panics.
       * Exit with non-zero code on error
       * discovery/kubernetes/ingress: fix scheme discovery
       * Fix race in zookeeper sd
       * Better timeout handling in promql
       * Propogate errors when selecting series from the tsdb
   - Update to 2.3.1
     + Bug Fixes:
       * Avoid infinite loop on duplicate NaN values.
       * Fix nil pointer deference when using various API endpoints
       * config: set target group source index during unmarshalling
       * discovery/file: fix logging
       * kubernetes_sd: fix namespace filtering
       * web: restore old path prefix behavior
       * web: remove security headers added in 2.3.0
   - Update to 2.3.0
     + marathon_sd: use auth_token and auth_token_file for token-based
       authentication instead of bearer_token and bearer_token_file
       respectively
     + Metric names for HTTP server metrics changed
     + Features:
       * Add query commands to promtool
       * Add security headers to HTTP server responses
       * Pass query hints via remote read API
       * Basic auth passwords can now be configured via file across all
         configuration
     + Enhancements:
       * Optimise PromQL and API serialization for memory usage and
         allocations
       * Limit number of dropped targets in web UI
       * Consul and EC2 service discovery allow using server-side filtering
         for performance improvement
       * Add advanced filtering configuration to EC2 service discovery
       * marathon_sd: adds support for basic and bearer authentication, plus
         all
         other common HTTP client options (TLS config, proxy URL, etc.)
       * Provide machine type metadata and labels in GCE service discovery
       * Add pod controller kind and name to Kubernetes service discovery data
       * Move TSDB to flock-based log file that works with Docker containers
     + Bug Fixes:
       * Properly propagate storage errors in PromQL
       * Fix path prefix for web pages
       * Fix goroutine leak in Consul service discovery
       * Fix races in scrape manager
       * Fix OOM for very large k in PromQL topk() queries
       * Make remote write more resilient to unavailable receivers
       * Make remote write shutdown cleanly
       * Don't leak files on errors in TSDB's tombstone cleanup
       * Unary minus expressions now removes the metric name from results
       * Fix bug that lead to wrong amount of samples considered for time
         range expressions
   - Update to 2.2.1
     + Bug Fixes:
       * Fix data loss in TSDB on compaction
       * Correctly stop timer in remote-write path
       * Fix deadlock triggered by loading targets page
       * Fix incorrect buffering of samples on range selection queries
       * Handle large index files on windows properly
   - Update to 2.2.0
     + This release introduces improvements to the storage format and fixes a
       regression introduced in 2.1. As a result Prometheus servers upgraded
       to 2.2 cannot be downgraded to a lower version anymore!
     + Rename file SD mtime metric
     + Send target update on empty pod IP in Kubernetes SD
     + Features:
       * Add API endpoint for flags.
       * Add API endpoint for dropped targets.
       * Display annotations on alerts page.
       * Add option to skip head data when taking snapshots
     + Enhancements:
       * Federation performance improvement.
       * Read bearer token file on every scrape.
       * Improve typeahead on /graph page.
       * Change rule file formatting.
       * Set consul server default to localhost:8500.
       * Add dropped Alertmanagers to API info endpoint.
       * Add OS type meta label to Azure SD.
       * Validate required fields in SD configuration.
     + Bug Fixes:
       * Prevent stack overflow on deep recursion in TSDB.
       * Correctly read offsets in index files that are greater than 4GB.
       * Fix scraping behavior for empty labels.
       * Drop metric name for bool modifier.
       * Fix races in discovery.
       * Fix Kubernetes endpoints SD for empty subsets.
       * Throttle updates from SD providers, which caused increased CPU usage
         and allocations.
       * Fix TSDB block reload issue.
       * Fix PromQL printing of empty without().
       * Don't reset FiredAt for inactive alerts.
       * Fix erroneous file version changes and repair existing data.
   - remove pr-3174.patch, has been fixed in
     https://github.com/prometheus/prometheus/pull/3517


Patch Instructions:

   To install this SUSE Optional Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Manager Tools 15-BETA:

      zypper in -t patch SUSE-SLE-Manager-Tools-15-BETA-2019-884=1



Package List:

   - SUSE Manager Tools 15-BETA (aarch64 ppc64le s390x x86_64):

      golang-github-prometheus-node_exporter-0.17.0-5.3.2
      golang-github-prometheus-prometheus-2.7.1-5.3.3

   - SUSE Manager Tools 15-BETA (noarch):

      mgr-cfg-4.0.4-3.3.4
      mgr-cfg-actions-4.0.4-3.3.4
      mgr-cfg-client-4.0.4-3.3.4
      mgr-cfg-management-4.0.4-3.3.4
      mgr-custom-info-4.0.2-3.3.4
      mgr-daemon-4.0.3-3.3.2
      mgr-osad-4.0.5-3.3.3
      mgr-push-4.0.3-3.3.4
      mgr-virtualization-host-4.0.3-3.3.5
      python3-jabberpy-0.5-5.2.1
      python3-mgr-cfg-4.0.4-3.3.4
      python3-mgr-cfg-actions-4.0.4-3.3.4
      python3-mgr-cfg-client-4.0.4-3.3.4
      python3-mgr-cfg-management-4.0.4-3.3.4
      python3-mgr-osa-common-4.0.5-3.3.3
      python3-mgr-osad-4.0.5-3.3.3
      python3-mgr-push-4.0.3-3.3.4
      python3-mgr-virtualization-common-4.0.3-3.3.5
      python3-mgr-virtualization-host-4.0.3-3.3.5


References:

   https://www.suse.com/security/cve/CVE-2011-1550.html
   https://www.suse.com/security/cve/CVE-2012-2679.html
   https://bugzilla.suse.com/1015136
   https://bugzilla.suse.com/1038483
   https://bugzilla.suse.com/1039913
   https://bugzilla.suse.com/1049936
   https://bugzilla.suse.com/1064393
   https://bugzilla.suse.com/1073619
   https://bugzilla.suse.com/1076201
   https://bugzilla.suse.com/1082211
   https://bugzilla.suse.com/1083294
   https://bugzilla.suse.com/1087299
   https://bugzilla.suse.com/1090504
   https://bugzilla.suse.com/1093529
   https://bugzilla.suse.com/1103696
   https://bugzilla.suse.com/1104034
   https://bugzilla.suse.com/11040346
   https://bugzilla.suse.com/1115414
   https://bugzilla.suse.com/1124610
   https://bugzilla.suse.com/652676
   https://bugzilla.suse.com/660789
   https://bugzilla.suse.com/667924
   https://bugzilla.suse.com/669894
   https://bugzilla.suse.com/672637
   https://bugzilla.suse.com/672643
   https://bugzilla.suse.com/678489
   https://bugzilla.suse.com/679716
   https://bugzilla.suse.com/681984
   https://bugzilla.suse.com/683075
   https://bugzilla.suse.com/684390
   https://bugzilla.suse.com/694028
   https://bugzilla.suse.com/695946
   https://bugzilla.suse.com/696294
   https://bugzilla.suse.com/722052
   https://bugzilla.suse.com/764532
   https://bugzilla.suse.com/764854
   https://bugzilla.suse.com/766148
   https://bugzilla.suse.com/776356
   https://bugzilla.suse.com/776377
   https://bugzilla.suse.com/786159
   https://bugzilla.suse.com/797057
   https://bugzilla.suse.com/806202
   https://bugzilla.suse.com/815460
   https://bugzilla.suse.com/838509
   https://bugzilla.suse.com/859541
   https://bugzilla.suse.com/869888
   https://bugzilla.suse.com/871549
   https://bugzilla.suse.com/872970
   https://bugzilla.suse.com/895869
   https://bugzilla.suse.com/900498
   https://bugzilla.suse.com/901958
   https://bugzilla.suse.com/915581
   https://bugzilla.suse.com/919433
   https://bugzilla.suse.com/920897
   https://bugzilla.suse.com/931503
   https://bugzilla.suse.com/931685
   https://bugzilla.suse.com/933738
   https://bugzilla.suse.com/950372
   https://bugzilla.suse.com/970550
   https://bugzilla.suse.com/980752



More information about the sle-updates mailing list