Mon July 1 12:42:34 UTC 2024 - Adnilson Delgado <adnilson.delgado@suse.com>
- Version 2.18
  * Move temporary storage of downloaded files to the repo directory to avoid filling up /tmp partition. (gh:#1137)
  * Fixes for RES7-LTSS and OL7-LTSS clients
  * Instance Verification: re-setting the repository and registry cache path to the right value; update the cache scrubber paths

Thu April 18 09:27:00 UTC 2024 - Adnilson Delgado <adnilson.delgado@suse.com>
- Version 2.17 :
  * Improve CLI mirroring summary information by adding the mirror repositories, the file count and size. (gh#702)
  * Copy metadata content to repodata/ and not create a seperate subdirectory repodata/repodata (gh#1136)
  * Adding Uptime tracking capability (jsc#PED-7982, jsc#PED-8018)
  * actionpack update, fixing CVE-2024-28103 (bsc#1225997)
  * Registry authentication host capability for public cloud

- Adding -f to the file move command when moving the mirrored directory to its final location (bsc#1203171)

• Files Changed
• Browse Source

--------------------------------------------------------------------
Thu April 11 15:22:00 UTC 2024 - Felix Schnizlein <fschnizlein@suse.com>
- Version 2.16 :
  * Support bzip2 compressed repositories (bsc#1222122)
  * Remove automatic backup generation for repodata within repository. .old_repodata
    directories are obsolete and can be removed savely.
  * Add support for debian repositories using flat or nested structures (jsc#PED-3684)
    * make sure yum that can read repomd.xml correctly is installed (bsc#1221223)

• Files Changed
• Browse Source

- Version 2.15:
  * Moving system hardware information to systems database table to
    allow transmitting system information dynamically. (jsc#PED-3734)
  * Dropping Rails Secrets facilities and related config files (bsc#1215176)
  * Updated supportconfig script (bsc#1216389)
  * Support zstd compression for repository metadata (bsc#1218775)
  * Do not add credential handling to normal repository URLs (bsc#1219153)
  * Fix for SUSE Liberty registration script to allow RHEL7/SLL7/CentOS7 clients to register to RMT servers
  * Provide user/group symbol for user created during pre (boo#1219540)
  * Disable authentication for license files in pubcloud context
  * Higher registration sharing timeout
  * rmt-server-pubcloud:
    * Extend cache expiration time for BYOS systems (PAYG: 20 min, BYOS: 24 hours)
    * Include byos parameter when checking subscription validity for BYOS systems with SCC

- Version 2.14
- Add command 'rmt-cli clean packages', which remove dangling packages no longer
  referenced in the available metadata files and their database entries. (gh#662)
- Fix for SUSE Liberty registration script to allow register to RMT servers with
  self-signed certificates and enable both old and new singing keys for SLL8 (bsc#1209825)
- Fix for local import of packages with special characters (bsc#1213002)

• Files Changed
• Browse Source

- Version 2.13
  * Handle X-Original-URI header, partial fix for bsc#1211398
  * New endpoint to handle SUMa CLI tool PAYG/BYOS check
  * Additional API paths for SUMa PAYG for RMT
  * Allow access to SUMa Client Tools and Proxy channels if product is SUMA_Server
  * Handle system token for BYOS instances in the cloud

• Files Changed
• Browse Source

- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)
  * Force rmt-client-setup-res script to use https (bsc#1209825)
  * Download repomd.xml.asc before repomd.xml.key, because there are repos that only have repomd.xml.asc

- Version 2.11:
  * Mark secrets.yml.key file as part of the rpm to allow seamless downgrades (bsc#1207670)
  * Adding -f to the file move command when moving the mirrored directory to its final location (bsc#1203171) 
  * Fix %post install of pubcloud subpackage reload of nginx (bsc#1206593)
  * Skip warnings regarding nokogiri libxml version mismatch (bsc#1202053)

- Release version 2.10:
  - Add option to turn off system token support (bsc#1205089)
  - Update the `last_seen_at` column on zypper service refresh
  - Do not retry to import non-existing files in air-gapped mode (bsc#1204769)
  - Fix CVE-2022-31254 (bsc#1204285): rmt-server-pubcloud allows to escalate from user _rmt to root
  Root-level escalation vector bug was found in the packaging file which has been mitigated.

- adapt rmt-client-setup-res script to work on SLL9/RHEL9

- Send system creation and product activation dates to SCC for better
  visibility in SCC.

• Files Changed
• Browse Source

- Release version 2.9: Implement `System-Token` header handling to improve unique system reporting.

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- Version 2.8.0
- Forwarding information of registered systems to SCC more efficiently in batches
- Syncing the systems' most recent last seen timestamps to SCC
- Optional '--no-confirmation' switch to skip user confirmation when cleaning repository data
- Fix "rmt-cli systems list --csv -a" for RMTs with millions of systems (bsc#1191552)
- Enable nginx configs to serve on IPv6
- Enable users with old versions of RMT to sync systems with SCC by default
- Fix build using ruby 3.x (boo#1195318).

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- Fix build using ruby 3.x (boo#1195318).
- Version 2.7.1
- Remove products with a negative ID during migration
- Changes to RMT/connect API: RMT returns HTTP status code 422 whenever a system
  tries to register/activate a product with an expired subscription.
- Mirror metadata retry. This fixes bsc#1188578
- Update the way allowed paths are checked
  SUMA requested a new feature where it is possible to validate
  all versions of the same product and arch (that are allowed to that system)
- De-register BYOS systems using RMT as a proxy from SCC
- De-activate a single product from a BYOS proxy system

• Files Changed
• Browse Source

PubCloud:
- Update the way allowed paths are checked
  SUMA requested a new feature where it is possible to validate
  all versions of the same product and arch (that are allowed to that system)

PubCloud:
- De-register BYOS systems using RMT as a proxy from SCC
- De-activate a single product from a BYOS proxy system

PubCloud:
- Add the handling of the BYOS systems that use RMT as a SCC proxy
  In order to do that:
- New boolean column in systems table in db: proxy_byos
- Skip the sync with SCC (using that column)
- Registration of the system to SCC (announce system call and
  then use SCC credentials)
- Activation of products
- Check subscription is active/valid for a product/repo to be accessed

- Re-fix broken symlinks: This version fixes the bug-fix

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- Fix: Don't create suma and repo symlinks at install stage, instead
  only link them at the post stage if they don't exist (bsc#1188043)

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- Version 2.6.10
- Fix: Rails 6.1 zeitwerk autoloading errors
This references bsc#1186798

• Files Changed
• Browse Source