November 2024 - Uyuni Announce - openSUSE Mailing Lists

Recordings available - Community Hours Thursday, November 28th 2024
by Raúl Osuna Sánchez-Infante 29 Nov '24

29 Nov '24

Hello folks! If you missed the last Uyuni Community Hours that took place on November 28th, check out the recording at https://youtu.be/gd3fpY6Nm4k Please bear in mind that the HD version of the recording might still being processed, and it could take up to a couple of hours till it is ready. Remember, you can find all the information about the Community hours, included updated agenda and link for the meeting, at https://github.com/uyuni-project/uyuni/wiki/Uyuni-Community-Hours Happy hacking and have a lot of fun! Raúl & Marina -- Kind regards, Raúl Osuna Sánchez-Infante SUSE Multi-Linux Manager and Uyuni Software Release Engineer SUSE Software Solutions Spain SL Engineering & Innovation, EMEA

1 0

Community Hours on Thursday 28th (tomorrow), at 16.00 CET / 15.00 UTC
by Raúl Osuna Sánchez-Infante 27 Nov '24

27 Nov '24

Hello folks! Like every last Thursday of each month, we'll be having on Thursday 28th (tomorrow) a session of the Uyuni Community Hours. The agenda is: - Uyuni 2024.10: Security Update (Raúl) - Hackweek 24 projects: - New distributions as clients for Uyuni - Enhanced changelog validation with GitHub actions - UX/UI: Simplifying User Management section The link to the Jitsi meeting can be found here: https://meet.jit.si/moderated/08658cae0e2eefa6e84ef2229a34e339e1b3b473449ae… Remember you can find all the information about the Community hours, including updated agenda and link for the meeting at https://github.com/uyuni-project/uyuni/wiki/Uyuni-Community-Hours See you there! -- Kind regards, Raúl Osuna Sánchez-Infante SUSE Manager and Uyuni Software Release Engineer SUSE Software Solutions Spain SL Engineering & Innovation, EMEA

1 0

IMPORTANT: Patches (including several Security fixes) for Uyuni 2024.10 Server and Proxy
by Marina Latini 19 Nov '24

19 Nov '24

Hello! We released a set of security patches for Uyuni 2024.10 Server and Proxy that provide the following fixes: * CVE-2024-22037: Database password leaked by systemd uyuni-server-attestation service (bsc#1231497) * CVE-2024-47533: Prevent privilege escalation from none to admin (bsc#1231332) * CVE-2024-22037: Use podman secret to store the database credentials (bsc#1231497) * CVE-2024-49502: Validate proxy hostname format and escape proxy username to mitigate XSS vulnerabilities (bsc#1231852) * CVE-2024-49503: Escape organization credentials username to mitigate XSS vulnerability (bsc#1231922) * Redact JSESSIONID and pxt-session-cookie values from logs and console output (bsc#1231568) * Limit frontend-log message size (bsc#1231900) You can apply the patch at the Uyuni Server and Proxy by following the instructions at: https://www.uyuni-project.org/pages/patches.html Happy hacking and have a lot of fun! Raùl & Marina -- Marina Latini Release Engineer SUSE Software Solutions Germany GmbH Frankenstr. 146, 90461 Nuernberg Germany www.suse.com Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg) #ThePowerOfMany #DareToBeDifferent #HaveALotOfFun

1 0