July 2023 - Uyuni Announce - openSUSE Mailing Lists

Community Hours Friday 28th, at 16.00 CEST / 14.00 UTC
by Marina Latini 04 Sep '23

04 Sep '23

Hello, As every last Friday of each month, we'll be having a session of the Uyuni Community Hours tomorrow, Friday 28th. The session is focused on how to contribute to Uyuni and we will also have the second Google Summer of Code project presented. The agenda is: - GSoC 2023: Consuming Oval data to enhance CVE Audit - Enhancing Open Source: A Guide to Contributing to Uyuni Documentation - Uyuni frontend development quick start guide The link to join is: https://teams.microsoft.com/l/meetup-join/19%3Ameeting_ZjZlMWI0OTctNGMxZi00… Remember you can find all the information about the Community hours, included updated agenda and link for the meeting at https://github.com/uyuni-project/uyuni/wiki/Uyuni-Community-Hours See you there! -- Marina Latini Software Release Engineer SUSE Software Solutions Germany GmbH Frankenstr. 146 90461 Nuernberg, Germany Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg) #ThePowerOfMany #DareToBeDifferent #HaveALotOfFun

1 1

Re: Community Hours Friday, June 30th, at 16.00 CEST / 14.00 UTC
by Marina Latini 24 Jul '23

24 Jul '23

Hello folks! If you missed the last Uyuni Community Hours that took place on June 30th, check out the recording at https://youtu.be/w-13Gew7ziI Remember, you can find all the information about the Community hours, included updated agenda and link for the meeting, at https://github.com/uyuni-project/uyuni/wiki/Uyuni-Community-Hours Happy hacking and have a lot of fun! Marina -- Marina Latini (she/her/hers) Software Release Engineer SUSE Software Solutions Germany GmbH Frankenstraße 146 90461 Nürnberg, Germany Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman (HRB 36809, AG Nürnberg)

1 0

IMPORTANT: Patches (including several Security Patches) for Uyuni Server 2023.04
by Marina Latini 18 Jul '23

18 Jul '23

Hello! We released a security patch for Uyuni 2023.04 that provides fixes for CVE-2023-22644: * Fix session information leak (bsc#1210107) * Fix credentials and other secrets disclosure when debug log is enabled (bsc#1210154) * Remove web session swap secrets output in logs (bsc#1210086) * Do not output cobbler xmlrpc token in debug logs (bsc#1210162) * Do not output URL parameters for tiny urls (bsc#1210101) * Do not log SSL certificate / key file content (bsc#1210094) In addition, this patch provides the new GPG keys for Debian 12 and SUSE Package Hub. You can apply the patch at the Uyuni Server by following the instructions at: https://www.uyuni-project.org/pages/patches.html If you are still on 2023.03 or earlier, update first to 2023.04 normally (make sure you read the release notes, as special steps may be required if you are not on 2023.04 already), and then apply the patch as explained above. Happy hacking and have a lot of fun! -- Marina Latini (she/her/hers) Software Release Engineer SUSE Software Solutions Germany GmbH Frankenstraße 146 90461 Nürnberg, Germany Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman (HRB 36809, AG Nürnberg) #ThePowerOfMany #DareToBeDifferent #HaveALotOfFun

1 0