Changelog for koan-2.6.6-8.1.uyuni.noarch.rpm :

* Wed Feb 16 2022 Alexander Graul - Make configuration files only readable by root and apache (bsc#1195906, bsc#1193671, CVE-2021-45083)- Fixed rce in the xmlrpc which additionally allowed arbirtrary file read and write as root (bsc#1189458)- Added:
* v2-6-6-fix-rce.patch
* Mon Sep 28 2020 Matei Albu - Fix parsing cobbler dictionary options with values containing \"=\", e.g. kernel params containing \"=\" (bsc#1176978)- Added:
* fix-cobbler-options-dict-parsing.patch
* Tue Apr 28 2020 Michael Calmer - calculate relative path for kernel and inited when generating grub entry (bsc#1170231) Added: fix-grub2-entry-paths.diff- fix os-release version detection for SUSE Modified: sles15.patch
* Wed Jul 17 2019 trennAATTsuse.de- Jinja2 template library fix (bsc#1141661)- Added:
* jinja2_fix.patch
* Tue May 07 2019 Jochen Breuer - Removes string replace for textmode fix (bsc#1134195)- Added:
* remove-kopts-string-replaces.diff
* Tue Mar 19 2019 Jochen Breuer - Fixes case where distribution detection returns None (bsc#1130658)- Added:
* fixes-distro-none-case.diff
* Thu Feb 28 2019 Jochen Breuer - SUSE texmode fix (bsc#1109316)- Added:
* suse_texmode_fix.patch
* Fri Feb 15 2019 Jochen Breuer - Fix for SUSE distribution detection in ISO building (bsc#1123991)- Added:
* distro_breed_fix.patch
* Mon Nov 19 2018 mantelAATTsuse.de- fix service restart after logrotate for cobblerd (bsc#1113747)- rotate cobbler logs at higher frequency to prevent disk fillup (bsc#1113747)
* Fri Aug 10 2018 pablo.suarezhernandezAATTsuse.com- Forbid exposure of private methods in the API (CVE-2018-10931) (CVE-2018-1000225) (bsc#1104287) (bsc#1104189) (bsc#1105442)- Check access token when calling \'modify_setting\' API endpoint (bsc#1104190) (bsc#1105440) (CVE-2018-1000226)- Added:
* check-access-token-when-calling-modify_setting-api-e.patch
* cve-2018-10931-forbid-exposure-of-private-methods-in.patch
* Fri Jul 27 2018 mcAATTsuse.com- fix kernel options when generating bootiso (bsc#1101670)- Added:
* cobbler-buildiso-list-to-string.patch- Refreshed:
* cobbler-symlink.diff
* Tue Jun 26 2018 mantelAATTsuse.de- do not try to hardlink to a symlink. The result will be a dangling symlink in the general case (bsc#1097733)- Added:
* cobbler-symlink.diff
* Wed May 16 2018 mantelAATTsuse.de- fix signature for SLES15 (bsc#1075014)- Updated:
* add-sles15-distro.patch
* Tue May 08 2018 mantelAATTsuse.de- detect if there is already another instance of \"cobbler sync\" running and exit with failure if so (bsc#1081714)- Add:
* detect-parallel-cobbler-sync.patch
* Thu Apr 26 2018 pablo.suarezhernandezAATTsuse.com- Escape shell parameters provided by the user for the reposync action (CVE-2017-1000469) (bsc#1074594)- Added:
* escape-shell-parameters-provided-by-user-on-reposync.patch
* Fri Apr 20 2018 mcAATTsuse.de- add sles15 distro profile (bsc#1090205)- Add:
* add-sles15-distro.patch
* Tue Mar 13 2018 mantelAATTsuse.de- SLES15 is using /etc/os-release instead of /etc/SuSE-release, use this one for checking also- Add:
* sles15.patch
* Tue Dec 05 2017 mantelAATTsuse.de- cleanup: cobbler is noarch, so arch specific requires do not make sense
* Thu Nov 30 2017 mantelAATTsuse.de- build server wants explicite package in BuildRequires; use tftp- Fix koan shebang- Add:
* fix-usr-bin-env-bash-koan.diff
* Thu Nov 30 2017 mantelAATTsuse.de- require tftp(server) instead of atftp
* Fri Oct 06 2017 mcAATTsuse.com- fix koan wait parameter initialization Added:
* fix-wait.patch
* Thu Oct 05 2017 mihai.dincaAATTsuse.com- fix setup.py to identify SUSE OS correctly bsc#1046679 Added:
* fix-os-release.patch
* Wed Aug 09 2017 mseidlAATTsuse.de- missed applying last patch in spec file
* Wed Aug 09 2017 mseidlAATTsuse.de- (bsc#1048183) fix missing args and location for xen
* Wed Jun 07 2017 mihai.dincaAATTsuse.com- fix script endpoint security bug CVE-2016-9605 (bsc#1030582) Add:
* fix-script-endpoint-security-bug-1030582.patch
* Tue Apr 04 2017 mcAATTsuse.de- support UEFI boot with cobbler generated tftp tree (bsc#1020376)
* Tue Mar 21 2017 mantelAATTsuse.de- remove fix-nameserver-search.fix; bug is invalid (bsc#1029276)
* Wed Mar 15 2017 mantelAATTsuse.de- refresh patch for fuzzless appliance
* Wed Mar 15 2017 mantelAATTsuse.de- some more occurrences of same problem fixed (bsc#1029276)
* Tue Mar 14 2017 mantelAATTsuse.de- name_servers needs the same fix (bsc#1029276)
* Tue Mar 14 2017 mantelAATTsuse.de- fix handling of name_servers_search in networking.xml bsc#1029276
* Thu Nov 24 2016 pablo.suarezhernandezAATTsuse.com- Using \"chain.c32\" instead of \"LOCALBOOT -1\" for the local boot entry in pxe menu (bsc#988889) Add:
* localboot-fix-using-chain-c32.patch
* Thu Sep 01 2016 pablo.suarezhernandezAATTsuse.com- Enabling PXE grub2 support for PowerPC (bsc#986978) Add:
* adding-grub2-support-for-ppc.patch
* Fri Jun 17 2016 mcAATTsuse.de- convert bootoption \"text\" into \"textmode=1\" for SUSE systems (bsc#984998) Add:
* fix-textmode-for-SUSE.dif
* Tue May 17 2016 mcAATTsuse.de- remove grubby-compat because perl-Bootloader gets dropped Remove:
* grubby-compat.diff
* do_not_use_grubby_compat_when_grub2_is_in_use.diff Add:
* use_grub2_on_suse.diff
* Fri May 13 2016 pablo.suarezhernandezAATTsuse.com- Disabling \'get-loaders\' command and \'check\' fixed. bsc#973418 Added:
* cobbler-check-and-get-loaders-fix.patch
* Fri Apr 22 2016 mcAATTsuse.de- add logrotate file for cobbler (bsc#976826)
* Thu Mar 31 2016 mcAATTsuse.de- handle list value for kernel options correctly (bsc#973413)
* Wed Mar 16 2016 mcAATTsuse.de- add ppc64le to archs
* 0001-cobbler-add-little-endian-powerpc-support.patch
* Mon Mar 07 2016 mcAATTsuse.de- fix error message in cobblerd status when cobbler-web is not installed (bsc#966841)
* Fri Mar 04 2016 mcAATTsuse.de- fix format error while provisioning of a virtual machine (bsc#969541) Update: koan-improve-virt-install-error-reports.patch
* Wed Mar 02 2016 mcAATTsuse.de- support modprobe.d on RHEL6
* cobbler-modprobe-d.patch- fix cobbler yaboot handling (bsc#968406, bsc#966622)
* fix-cobbler-yaboot-handling.patch
* Wed Feb 24 2016 mcAATTsuse.de- improve error reporting of failed virt-install commands Add: koan-improve-virt-install-error-reports.patch
* Tue Feb 23 2016 mcAATTsuse.de- fallback to osinfo-query for new virt-install (bsc#967523)
* 0001-1398-koan-incompatible-with-F21-virt-install.patch- fix for virt-install without os version generic26 (bsc#967523)
* virt-install-without-generic26.patch
* Mon Nov 09 2015 mcAATTsuse.de- cleanup spec file. The cobbler main package should see a SUSE system as systemd only (bsc#952844)
* Thu Mar 26 2015 mcAATTsuse.de- koan: fix virt-install version detection (bsc#924118)- koan: fix parsing install_tree for SUSE (bsc#924118)- koan: do not require obsoleted xend (bsc#924118)- koan: fix boot configuration for XEN directly after VM creation. This prevent endless installation loop (bsc#924118)- koan: improve os-variant detection for SLES- koan: use KVM acceleration if available
* Mon Feb 16 2015 mseidlAATTsuse.de- Renamed generic suse breed \"suse\"
* Mon Feb 16 2015 mseidlAATTsuse.de- Added generic os under breed suse
* Fri Feb 13 2015 mseidlAATTsuse.de- fixed supported arches- added generic sles11, sles10 and sles12 signatures
* Wed Feb 11 2015 mseidlAATTsuse.de- Removed directory check for kickstart files
* Wed Feb 11 2015 dmacvicarAATTsuse.de- Do not manually install cobbler.conf setup.py does it and replaces variables in the process
* Thu Jan 15 2015 fcastelliAATTsuse.com- Added \'fix_test_create_systems.diff\': fixes the \"create_systens\" unit test
* Tue Jan 13 2015 fcastelliAATTsuse.com- Fix runtime dependency: ensure the yaml module is available.
* Tue Jan 13 2015 fcastelliAATTsuse.com- Install the right cobblerd.service file
* Mon Jan 12 2015 fcastelliAATTsuse.com- Do not ship cobbler_web.conf inside of the cobbler package, get rid of part of our patches to setup.py,
* Fri Dec 19 2014 fcastelliAATTsuse.com- Added new patch required to fix the broken unit tests:
* fix-broken-tests.diff
* Thu Dec 18 2014 fcastelliAATTsuse.com- Removed another no longer needed patch:
* fix-textmode-for-SUSE.dif
* Thu Dec 18 2014 fcastelliAATTsuse.com- Update to latest stable version of cobbler (2.6.6)- Removed no longer needed patches
* bnc_877009.patch
* cobbler-2.4.2-Fix-koan-s-get_insert_script.patch
* fix-broken-tests.diff
* suse_config.diff- Fixed old patches to apply against the new code:
* catch_cheetah_exception.patch
* grubby-compat.diff
* setup_py.diff
* Mon Dec 15 2014 fcastelliAATTsuse.com- Fix the broken unit tests
* Thu Dec 11 2014 mseidlAATTsuse.de- Created sub package for unit tests
* Tue Dec 09 2014 mcAATTsuse.de- use fdupes only on SUSE
* Mon Dec 08 2014 dmacvicarAATTsuse.de- Fix for re-installation of machines on SLE with static network configuration (bnc#883487)- Added patches:
* cobbler-2.4.2-Fix-koan-s-get_insert_script.patch
* cobbler-2.4.2-reprovision-rhel-on-suse-bnc883487.patch
* Thu Nov 27 2014 mcAATTsuse.de- fix port guessing in koan (bsc#855389)
* fix-koan-port-guessing.dif- add \"copy-default\" option to grubby-compat (bsc#855389)- handle elilo in SUSE (bsc#855389)
* Wed Nov 26 2014 mcAATTsuse.de- fix wrong option \"text\" in SUSE environment (bsc#901058)
* fix-textmode-for-SUSE.dif
* Thu Sep 04 2014 fcastelliAATTsuse.com- Added do_not_use_grubby_compat_when_grub2_is_in_use.diff: prevents usage of grubby-compat when grub2 is active. Use grub2 features do modify the boot loader.
* Tue Sep 02 2014 fcastelliAATTsuse.com- Moved grubby-compat inside of the koan sub-package. The scrit was accidentally moved into the cobbler package.
* Fri Jul 25 2014 fcastelliAATTsuse.com- Added fix_sle_detection.patch: ensures SLE12 is properly detected.
* Fri Jul 25 2014 fcastelliAATTsuse.com- Fixed and error \'grubby-compat.diff\' patch which broke koan tool- Added bnc_877009.patch, fixes CVE-2014-3225: cobbler: Local files inclusion (bnc#877009)
* Fri Jul 11 2014 mcAATTsuse.de- Remove patch which automatically escapes cobbler templates. (bnc#869371)- require syslinux-x86_64 on s390x (bnc#884051)
* Wed Jul 09 2014 mcAATTsuse.de- mod_python is not needed anymore for cobbler remove module from apache configuration
* Thu Jul 03 2014 mseidlAATTsuse.de- modified to work with aftpd
* Fri Feb 14 2014 mcAATTsuse.de- update to version 2.4.2 + Adding support for gPXE + Adding support for ESXi5 + fix install=... kernel parameter when importing a SUSE distro + koan: Port xen creation to virt-install + koan: Port qcreate to virt-install + Port koan from virtinst to virt-install command (v2) + add qcow2 driver type + Adding ability to use https for API calls (cobbler CLI) + Use ip instead of ifconfig for network snippets + minor modifications to templar to show template rendering errors + bugfixes and refactoring obsolete patches (available upstream):
* cobbler-man-fix.dif
* fix-initscript.dif
* fix-setting-system-to-image.dif
* fix-snippet.dif
* fix_suse_import.diff
* fix_version_format.diff
* fix-xen-fullvirt-install.dif
* koan_distro_files_fix.diff
* security_fix_xmlrpc_command_injection.diff
* fix-http-check-on-SUSE-platform.patch
* users_patch.diff
* Wed Dec 11 2013 cdenicoloAATTsuse.com- license update: GPL-2.0+ SPDX name
* Wed Nov 13 2013 fcastelliAATTsuse.com- Fix man page inconsistencies.
* Fri Nov 08 2013 mcAATTsuse.de- fix evaluation of power status calls
* Mon Nov 04 2013 mcAATTsuse.de- fix wrong options in the man page (bnc#846580)
* Thu Oct 31 2013 mcAATTsuse.com- fix adding image to system
* Wed Oct 30 2013 mcAATTsuse.de- add fence_ipmitool script for power management- require ipmitool
* Thu Oct 17 2013 mcAATTsuse.de- fix networking.xml snippet and use the correct key for getting the netmask (bnc#842699)
* Wed Jul 10 2013 fcastelliAATTsuse.com- Fix cobbler checks on SUSE (bnc#828453)
* Wed Apr 03 2013 mcAATTsuse.de- koan requires python-urlgrabber (bnc#812948)
* Wed Mar 27 2013 mcAATTsuse.de- fix XEN fullvirt installation
* Tue Mar 26 2013 mcAATTsuse.de- fix restart of new created paravirt XEN systems (bnc#811025)
* Fri Jan 04 2013 mcAATTsuse.de- fix autoescaping to not strip empty lines. This keep GPG keys in a kickstart profile working (bnc#796773)
* Wed Nov 21 2012 mcAATTsuse.de- do not auto escape snippets (bnc#790545)
* Fri Nov 16 2012 boAATTsuse.de- Templates don\'t need to be dollar sign escaped any longer. (bnc#790545)
* Mon Nov 12 2012 mcAATTsuse.de- forward cheetah exception as 500 SERVER ERROR (bnc#787879)
* Thu Aug 23 2012 mcAATTsuse.de- install grubby-compat to /sbin (bnc#783671)
* Thu May 24 2012 ugAATTsuse.de- VUL-0: cobbler: remote code execution flaw bnc#763610
* Tue May 22 2012 ugAATTsuse.de- changed the order to look for cobbler. Try https first to avoid exception
* Tue May 22 2012 ugAATTsuse.de- requires fixed in spec file
* Wed May 16 2012 ugAATTsuse.de- added compatibility code for koan 2.2.2 to cobbler 2.0.10
* Tue May 15 2012 ugAATTsuse.de- added grubby-compat patch again- some spec file fixes
* Wed May 09 2012 ugAATTsuse.de- build on RHEL6 fixed
* Wed May 09 2012 ugAATTsuse.de- build on RHEL fixed
* Wed May 09 2012 ugAATTsuse.de- build on SLES10 fixed
* Thu May 03 2012 ugAATTsuse.de- requires syslinux only on x86 architecture
* Fri Apr 20 2012 ugAATTsuse.de- changed the XMLRPC API call version() to return a float instead of a string
* Wed Apr 18 2012 ugAATTsuse.de- don\'t overwrite existing kernel/initrd when reinstalling a machine (bnc#722443)
* Mon Apr 16 2012 ugAATTsuse.de- VUL-0: CVE-2011-4953 cobbler: privilege escalation flaw / local root (bnc#757062)
* Tue Mar 27 2012 chrisAATTcomputersalat.de- update to 2.2.2
* please see CHANGELOG for more info- remove obsolete virt-auto-boot patch- rebase patches
* Mon Feb 13 2012 ugAATTsuse.de- fixed return value of rccobblerd status
* Mon Feb 13 2012 cooloAATTsuse.com- patch license to follow spdx.org standard
* Thu Dec 22 2011 ugAATTsuse.de- fix install=... kernel option when you import a SUSE distro
* Wed Oct 26 2011 ugAATTsuse.de- virtual machines autostart on boot fixed
* Wed Oct 19 2011 ugAATTsuse.de- quotes fixed for the kernel parameters in menu.lst (bnc#722445)- Virtual systems don\'t get restarted on restart of host (bnc#695955)- allowed length of the kernel options line changed from 256 to 2048 characters
* Tue Sep 27 2011 ugAATTsuse.de- koan requires python-urlgrabber
* Fri Sep 23 2011 ugAATTsuse.de- build on RES fixed
* Thu Sep 22 2011 ugAATTsuse.de- Require in spec-file fixed
* Fri Sep 16 2011 ugAATTsuse.de- added grubby-compat patch (bnc#672471)
* Mon Sep 12 2011 mcAATTsuse.de- no python-virtinst on Code10
* Wed Jun 08 2011 ugAATTsuse.de- koan reads the architecture for virtual machines from cobbler (fate#312397 and bnc#682665)- ISO build parameters for a SUSE system fixed- cheetah rendering before XML parsing now, to avoid problems with the XML parser and cheetah instructions- Add possibility to interrupt zPXE and to enter CMS- changed defaults for s390 to be more SUSE like (bnc#687891)
* Wed Apr 27 2011 ugAATTsuse.de- fixed a broken timezone setting in cobbler-web
* Wed Apr 27 2011 ugAATTsuse.de- building for SLE10 fixed
* Wed Mar 23 2011 ugAATTsuse.de- VUL-0: cobbler: logrotate: issues with service owned directories bnc#678433
* Fri Feb 18 2011 ugAATTsuse.de- removed python-devel in requirement
* Thu Feb 17 2011 kkaempfAATTnovell.com- Fix build on RHEL
* Thu Feb 17 2011 ugAATTsuse.de- added missing rc-script link (bnc#671212)
* Wed Feb 16 2011 ugAATTsuse.de- cheetah_class_fix.diff added to fix a cheetah version check
* Fri Feb 11 2011 mcAATTsuse.de- cobbler_wsgi.conf will not be packaged
* Wed Feb 09 2011 roAATTsuse.de- require syslinux only on x86 and x86_64
* Wed Feb 09 2011 roAATTsuse.de- fix config file location on RH
* Tue Feb 08 2011 maAATTnovell.com- fix specfile
* Tue Feb 08 2011 mcAATTsuse.de- require python-virtinst in SUSE
* Thu Feb 03 2011 ugAATTsuse.de- packaged the cobbler.conf file instead of the cobbler_wsgi.conf file again (bnc#668968)
* Wed Feb 02 2011 mcAATTsuse.de- require python-virtinst only for RHEL >= 5
* Wed Feb 02 2011 mcAATTsuse.de- require grubby only on SUSE
* Wed Feb 02 2011 mcAATTsuse.de- fix suse_version check in spec file- fix build on RH
* Fri Jan 28 2011 ugAATTsuse.de- fixed the apache config
* Wed Jan 19 2011 ugAATTsuse.de- firewall settings added
* Fri Jan 14 2011 ugAATTsuse.de- debug switch in specfile removed to make it build again
* Thu Jan 13 2011 ugAATTsuse.de- version update to 2.0.10 because of many bugs ins 2.0.8
* Wed Jan 12 2011 ugAATTsuse.de- some template files were not packed since 2.0.8
* Tue Jan 11 2011 ugAATTsuse.de- version update to 2.0.8 (bnc#660126)
* Tue Dec 21 2010 ugAATTsuse.de- fixed spec file
* Thu Sep 09 2010 kkaempfAATTnovell.com- remove \'xinetd\' from Required-Start