SUSE-RU-2023:0357-1: moderate: Recommended update for SUSE Manager Client Tools

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for SUSE Manager Client Tools
______________________________________________________________________________

Announcement ID:    SUSE-RU-2023:0357-1
Rating:             moderate
References:         #1204126 #1204939 #1205207 ECO-3319 
Affected Products:
                    SUSE Manager Debian 10-CLIENT-TOOLS
______________________________________________________________________________

   An update that has three recommended fixes and contains one
   feature can now be installed.

Description:


   This update fixes the following issues:

   salt:

   - Control the collection of lvm grains via config (bsc#1204939)

   scap-security-guide:

   - Updated to 0.1.65 (jsc#ECO-3319)
      - Introduce cui profile for OL9
      - Remove Support for OVAL 5.10
      - Rename account_passwords_pam_faillock_audit
      - CI ansible hardening and rename of existing Bash hardening
      - Update contributors list for v0.1.65 release
      - various SUSE profile specific fixes
   - Require sudo, as remediations touch sudo config or use sudo.
   - Enable ubuntu 2204 build
   - Updated to 0.1.64 (jsc#ECO-3319)
      - Introduce ol9 stig profile
      - Introduce Ol9 anssi profiles
      - Update RHEL8 STIG to V1R7
      - Introduce e8 profile for OL9
      - Update RHEL7 STIG to V3R8
      - some SUSE profile fixes
   - Added several RPM requires that are needed by the SUSE remediation
     scripts. (e.g. awk is not necessary installed)

   spacecmd:

   - Version 4.3.18-1
     * Add python-dateutil dependency, required to process date values in
       spacecmd api calls
   - Version 4.3.17-1
     * Remove python3-simplejson dependency
     * Correctly understand 'ssm' keyword on scap scheduling
     * Add vendor_advisory information to errata_details call (bsc#1205207)
     * Added two missing options to schedule product migration:
       allow-vendor-change and remove-products-without-successor (bsc#1204126)
     * Changed schedule product migration to use the correct API method
     * Change default port of "Containerized Proxy configuration" 8022


Patch Instructions:

   To install this SUSE Recommended Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Manager Debian 10-CLIENT-TOOLS:

      zypper in -t patch SUSE-Debian-10-CLIENT-TOOLS-x86_64-2023-357=1



Package List:

   - SUSE Manager Debian 10-CLIENT-TOOLS (all):

      salt-common-3004+ds-1+2.70.2
      salt-minion-3004+ds-1+2.70.2
      scap-security-guide-debian-0.1.65-2.29.1
      spacecmd-4.3.18-2.42.1


References:

   https://bugzilla.suse.com/1204126
   https://bugzilla.suse.com/1204939
   https://bugzilla.suse.com/1205207