Mon July 1 12:42:34 UTC 2024 - Adnilson Delgado <adnilson.delgado@suse.com>
- Version 2.18
* Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
* Fixes for RES7-LTSS and OL7-LTSS clients
* Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths
Thu April 18 09:27:00 UTC 2024 - Adnilson Delgado <adnilson.delgado@suse.com>
- Version 2.17 :
* Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
* Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
* Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
* actionpack update, fixing CVE-2024-28103 (bsc#1225997)
* Registry authentication host capability for public cloud
- Adding -f to the file move command when moving the mirrored directory to its final location (bsc#1203171)
OBS-URL: https://build.opensuse.org/request/show/1185392
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rmt-server?expand=0&rev=61
- Version 2.18
* Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
* Fixes for RES7-LTSS and OL7-LTSS clients
* Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:SCC:RMT/rmt-server?expand=0&rev=284
- Version 2.17 :
* Improve CLI mirroring summary information by adding the mirror repositories,
the file count and size (gh#702)
* Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
* Registry authentication host capability for public cloud
Thu April 11 15:22:00 UTC 2024 - Felix Schnizlein <fschnizlein@suse.com>
- Version 2.16 :
* Support bzip2 compressed repositories (bsc#1222122)
* Remove automatic backup generation for repodata within repository. .old_repodata
directories are obsolete and can be removed savely.
* Add support for debian repositories using flat or nested structures (jsc#PED-3684)
- Version 2.15:
* Moving system hardware information to systems database table to
allow transmitting system information dynamically. (jsc#PED-3734)
* Dropping Rails Secrets facilities and related config files (bsc#1215176)
* Updated supportconfig script (bsc#1216389)
* Support zstd compression for repository metadata (bsc#1218775)
* Do not add credential handling to normal repository URLs (bsc#1219153)
* Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
* make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
* Provide user/group symbol for user created during pre (boo#1219540)
* Disable authentication for license files in pubcloud context
* Higher registration sharing timeout
* rmt-server-pubcloud:
* Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
* Include byos parameter when checking subscription validity for BYOS systems with SCC
- Fix for local import of packages with special characters (bsc#1213002)
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:SCC:RMT/rmt-server?expand=0&rev=275
--------------------------------------------------------------------
Thu April 11 15:22:00 UTC 2024 - Felix Schnizlein <fschnizlein@suse.com>
- Version 2.16 :
* Support bzip2 compressed repositories (bsc#1222122)
* Remove automatic backup generation for repodata within repository. .old_repodata
directories are obsolete and can be removed savely.
* Add support for debian repositories using flat or nested structures (jsc#PED-3684)
* make sure yum that can read repomd.xml correctly is installed (bsc#1221223)
OBS-URL: https://build.opensuse.org/request/show/1169095
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rmt-server?expand=0&rev=60
Version 2.16
* Support bzip2 compressed repositories (bsc#1222122)
* Remove automatic backup generation for repodata within repository. .old_repodata
directories are obsolete and can be removed safely.
* Add support for Debian repositories using flat or nested structures (jsc#PED-3684)
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:SCC:RMT/rmt-server?expand=0&rev=271
- Version 2.15:
* Moving system hardware information to systems database table to
allow transmitting system information dynamically. (jsc#PED-3734)
* Dropping Rails Secrets facilities and related config files (bsc#1215176)
* Updated supportconfig script (bsc#1216389)
* Support zstd compression for repository metadata (bsc#1218775)
* Do not add credential handling to normal repository URLs (bsc#1219153)
* Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
* Provide user/group symbol for user created during pre (boo#1219540)
* Disable authentication for license files in pubcloud context
* Higher registration sharing timeout
* rmt-server-pubcloud:
* Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
* Include byos parameter when checking subscription validity for BYOS systems with SCC
- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)
OBS-URL: https://build.opensuse.org/request/show/1156024
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rmt-server?expand=0&rev=59
* Moving system hardware information to systems database table to
allow transmitting system information dynamically. (jsc#PED-3734)
* Fix secrets access for server user (bsc#1215176)
* rmt-client-setup-res script: fix for CentOS8 clients (bsc#1214709)
* Updated supportconfig script (bsc#1216389)
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:SCC:RMT/rmt-server?expand=0&rev=264
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:SCC:RMT/rmt-server?expand=0&rev=258
* Handle X-Original-URI header, partial fix for bsc#1211398
* New endpoint to handle SUMa CLI tool PAYG/BYOS check
* Additional API paths for SUMa PAYG for RMT
* Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
* Handle system token for BYOS instances in the cloud
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:SCC:RMT/rmt-server?expand=0&rev=256
- Version 2.12
* Update translations
* CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
in bytesliced strings for html_safe. (bsc#1209507)
* CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)
* Force rmt-client-setup-res script to use https (bsc#1209825)
* Download repomd.xml.asc before repomd.xml.key, because there are repos that only have repomd.xml.asc
- Version 2.11:
* Mark secrets.yml.key file as part of the rpm to allow seamless downgrades (bsc#1207670)
* Adding -f to the file move command when moving the mirrored directory to its final location (bsc#1203171)
* Fix %post install of pubcloud subpackage reload of nginx (bsc#1206593)
* Skip warnings regarding nokogiri libxml version mismatch (bsc#1202053)
- Release version 2.10:
- Add option to turn off system token support (bsc#1205089)
- Update the `last_seen_at` column on zypper service refresh
- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)
- Fix CVE-2022-31254 (bsc#1204285): rmt-server-pubcloud allows to escalate from user _rmt to root
Root-level escalation vector bug was found in the packaging file which has been mitigated.
- adapt rmt-client-setup-res script to work on SLL9/RHEL9
- Send system creation and product activation dates to SCC for better
visibility in SCC.
OBS-URL: https://build.opensuse.org/request/show/1082660
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rmt-server?expand=0&rev=57
* Update translations
* Fix CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
in bytesliced strings for html_safe. (bsc#1209507)
- Force rmt-client-setup-res script to use https (bsc#1209825)
- Download repomd.xml.asc before repomd.xml.key, because there are repos that only have repomd.xml.asc
OBS-URL: https://build.opensuse.org/package/show/systemsmanagement:SCC:RMT/rmt-server?expand=0&rev=253
