SUSE-RU-2021:2661-1: moderate: Recommended update for SUSE Manager Client Tools

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for SUSE Manager Client Tools
______________________________________________________________________________

Announcement ID:    SUSE-RU-2021:2661-1
Rating:             moderate
References:         #1164192 #1167586 #1173103 #1173692 #1180650 
                    #1184659 #1185131 #1186287 #1186310 #1186581 
                    #1187787 #1187813 #1188170 ECO-3319 
Affected Products:
                    SUSE Manager Debian 10-CLIENT-TOOLS
______________________________________________________________________________

   An update that has 13 recommended fixes and contains one
   feature can now be installed.

Description:


   This update fixes the following issues:

   salt:

   - Do noop for services states when running systemd in offline mode
     (bsc#1187787)
   - Transactional_updates: do not execute states in parallel but use a queue
     (bsc#1188170)
   - Handle "master tops" data when states are applied by
     "transactional_update" (bsc#1187787)
   - Enhance openscap module: add "xccdf_eval" call
   - Virt: pass emulator when getting domain capabilities from libvirt
   - Adding preliminary support for Rocky Linux
   - Implementation of held/unheld functions for state pkg (bsc#1187813)
   - Replace deprecated Thread.isAlive() with Thread.is_alive()
   - Fix exception in yumpkg.remove for not installed package
   - Fix save for iptables state module (bsc#1185131)
   - Virt: use /dev/kvm to detect KVM
   - Zypperpkg: improve logic for handling vendorchange flags
   - Add bundled provides for tornado to the spec file
   - Enhance logging when inotify beacon is missing pyinotify (bsc#1186310)
   - Add "python3-pyinotify" as a recommended package for Salt in
     SUSE/openSUSE distros
   - Fix tmpfiles.d configuration for salt to not use legacy paths
     (bsc#1173103)
   - Detect Python version to use inside container (bsc#1167586) (bsc#1164192)
   - Handle volumes on stopped pools in virt.vm_info (bsc#1186287)
   - Grains.extra: support old non-intel kernels (bsc#1180650)
   - Fix missing minion returns in batch mode (bsc#1184659)
   - Parsing Epoch out of version provided during pkg remove (bsc#1173692)

   scap-security-guide:

   - Updated to 0.1.56 release (jsc#ECO-3319)
     - Align ism_o profile with latest ISM SSP (#6878)
     - Align RHEL 7 STIG profile with DISA STIG V3R3
     - Creating new RHEL 7 STIG GUI profile (#6863)
     - Creating new RHEL 8 STIG GUI profile (#6862)
     - Add the RHEL9 product (#6801)
     - Initial support for SUSE SLE-15 (#6666)
     - add support for osbuild blueprint remediations (#6970)

   spacecmd:

   - Make spacecmd aware of retracted patches/packages
   - Enhance help for installation types when creating distributions
     (bsc#1186581)
   - Parse empty argument when nothing in between the separator


Patch Instructions:

   To install this SUSE Recommended Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Manager Debian 10-CLIENT-TOOLS:

      zypper in -t patch SUSE-Debian-10-CLIENT-TOOLS-x86_64-2021-2661=1



Package List:

   - SUSE Manager Debian 10-CLIENT-TOOLS (all):

      salt-common-3002.2+ds-1+2.30.1
      salt-minion-3002.2+ds-1+2.30.1
      scap-security-guide-debian-0.1.56-2.6.2
      spacecmd-4.2.11-2.12.1


References:

   https://bugzilla.suse.com/1164192
   https://bugzilla.suse.com/1167586
   https://bugzilla.suse.com/1173103
   https://bugzilla.suse.com/1173692
   https://bugzilla.suse.com/1180650
   https://bugzilla.suse.com/1184659
   https://bugzilla.suse.com/1185131
   https://bugzilla.suse.com/1186287
   https://bugzilla.suse.com/1186310
   https://bugzilla.suse.com/1186581
   https://bugzilla.suse.com/1187787
   https://bugzilla.suse.com/1187813
   https://bugzilla.suse.com/1188170