SUSE-SU-2021:3908-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2021/suse-su-20213908-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3908-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2021:3908-1

Related

Published

2021-12-03T11:05:28Z

Modified

2021-12-03T11:05:28Z

Summary

Security Beta update for SUMA client tools

Details

This update fixes the following issues:

dracut-saltboot:

Fix dependencies of python libs (bsc#1188846)
Update to version 0.1.1628156312.dbd0dec
Force installation of libexpat.so.1 (bsc#1188846)
Update to version 0.1.1627546504.96a0b3e
Use kernel parameters from PXE formula also for local boot

golang-github-prometheus-prometheus:

Provide and reload firewalld configuration only for:
- openSUSE Leap 15.0, 15.1, 15.2
- SUSE SLE15, SLE15 SP1, SLE15 SP2
Refresh patches
- Changed:
Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
- Bugfix:
  - SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
Upgrade to upstream version 2.27.0
- Features:
  - Promtool: Retroactive rule evaluation functionality. #7675
  - Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  - TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  - UI: Add a dark theme. #8604
  - AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  - Docker Discovery: Add Docker Service Discovery. #8629
  - OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  - Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
- Enhancements:
  - Digital Ocean Discovery: Add metadigitaloceanvpc label. #8642
  - Scaleway Discovery: Read Scaleway secret from a file. #8643
  - Scrape: Add configurable limits for label size and count. #8777
  - UI: Add 16w and 26w time range steps. #8656
  - Templating: Enable parsing strings in humanize functions. #8682
- Bugfixes:
  - UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  - TSDB: Do not panic when writing very large records to the WAL. #8790
  - TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  - Scaleway Discovery: Fix nil pointer dereference. #8737
  - Consul Discovery: Restart no longer required after config update with no targets. #8766
Update package with changes from server:monitoring bsc#1175478 Left out removal of firewalld related configuration files as SLE-15-SP1's firewalld package does not contain prometheus configuration yet.

grafana:

Add URL to package source code in the login page footer
Update to version 7.5.7:
- Updated relref to 'Configuring exemplars' section (#34240) (#34243)
- Added exemplar topic (#34147) (#34226)
- Quota: Do not count folders towards dashboard quota (#32519) (#34025)
- Instructions to separate emails with semicolons (#32499) (#34138)
- Docs: Remove documentation of v8 generic OAuth feature (#34018)
- Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
- [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
- ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
- Stop hoisting @icons/material (#33922)
- Chore: fix react-color version in yarn.lock (#33914)
- 'Release: Updated versions in package to 7.5.6' (#33909)
- Loki: fix label browser crashing when + typed (#33900) (#33901)
- Document hide_version flag (#33670) (#33881)
- Add isolation level db configuration parameter (#33830) (#33878)
- Sanitize PromLink button (#33874) (#33876)
- Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
- Docs feedback: /administration/provisioning.md (#33804) (#33842)
- Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
- Docs: Update _index.md (#33797) (#33799)
- Docs: Update installation.md (#33656) (#33703)
- GraphNG: uPlot 1.6.9 (#33598) (#33612)
- dont consider invalid email address a failed email (#33671) (#33681)
- InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
- add template for dashboard url parameters (#33549) (#33588)
- Add note to Snapshot API doc to specify that user has to provide the entire dashboard model (#33572) (#33586)
- Update team.md (#33454) (#33536)
- Removed duplicate file 'dashboardfolderpermissions.md (#33497)
- Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
- ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
- Documentation: Update developer-guide.md (#33478) (#33490)
- add closed parenthesis to fix a hyperlink (#33471) (#33481)
Update to version 7.5.5:
- 'Release: Updated versions in package to 7.5.5' (#33469)
- GraphNG: Fix exemplars window position (#33427) (#33462)
- Remove field limitation from slack notification (#33113) (#33455)
- Prometheus: Support POST in template variables (#33321) (#33441)
- Instrumentation: Add success rate metrics for email notifications (#33359) (#33409)
- Use either moment objects (for absolute times in the datepicker) or string (for relative time) (#33315) (#33406)
- Docs: Removed type from find annotations example. (#33399) (#33403)
- [v7.5.x]: FrontendMetrics: Adds new backend api that frontend can use to push frontend measurements and counters to prometheus (#33255)
- Updated label for add panel. (#33285) (#33286)
- Bug: Add git to Dockerfile.ubuntu (#33247) (#33248)
- Docs: Sync latest master docs with 7.5.x (#33156)
- Docs: Update getting-started-influxdb.md (#33234) (#33241)
- Doc: Document the X-Grafana-Org-Id HTTP header (#32478) (#33239)
- Minor Changes in Auditing.md (#31435) (#33238)
- Docs: Add license check endpoint doc (#32987) (#33236)
- Postgres: Fix time group macro when TimescaleDB is enabled and interval is less than a second (#33153) (#33219)
- Docs: InfluxDB doc improvements (#32815) (#33185)
- [v7.5.x] Loki: Pass Skip TLS Verify setting to alert queries (#33031)
- update cla (#33181)
- Fix inefficient regular expression (#33155) (#33159)
- Auth: Don't clear auth token cookie when lookup token fails (#32999) (#33136)
- Elasticsearch: Add documentation for supported Elasticsearch query transformations (#33072) (#33128)
- Update team.md (#33060) (#33084)
- GE issue 1268 (#33049) (#33081)
- Fixed some formatting issues for PRs from yesterday. (#33078) (#33079)
- Explore: Load default data source in Explore when the provided source does not exist (#32992) (#33061)
- Docs: Replace next with latest in aliases (#33054) (#33059)
- Added missing link item. (#33052) (#33055)
- Backport 33034 (#33038)
- Docs: Backport 32916 to v7.5x (#33008)
- ReleaseNotes: Updated changelog and release notes for 7.5.4 (#32973) (#32998)
- Elasticsearch: Force re-rendering of each editor row type change (#32993) (#32996)
- Docs: Sync release branch with latest docs (#32986)
Update to version 7.5.4:
- 'Release: Updated versions in package to 7.5.4' (#32971)
- fix(datasource_srv): prevent infinite loop where default datasource is named default (#32949) (#32967)
- Added Azure Monitor support for Microsoft.AppConfiguration/configurationStores namespace (#32123) (#32968)
- fix sqlite3 tx retry condition operator precedence (#32897) (#32952)
- AzureMonitor: Add support for Virtual WAN namespaces (#32935) (#32947)
- Plugins: Allow a non-dashboard page to be the default home page (#32926) (#32945)
- GraphNG: uPlot 1.6.8 (#32859) (#32863)
- Alerting: Add ability to include aliases with dashes (/) and at (@) signs in InfluxDB (#32844)
- Prometheus: Allow exemplars endpoint in data source proxy (#32802) (#32804)
- [v7.5.x] Table: Fixes table data links so they refer to correct row after sorting (#32758)
- TablePanel: Makes sorting case-insensitive (#32435) (#32752)
Update to version 7.5.3:
- 'Release: Updated versions in package to 7.5.3' (#32745)
- FolderPicker: Prevent dropdown menu from disappearing off screen (#32603) (#32741)
- Loki: Remove empty annotations tags (#32359) (#32490)
- SingleStat: fix wrong call to getDataLinkUIModel (#32721) (#32739)
- Prometheus: Fix instant query to run two times when exemplars enabled (#32508) (#32726)
- Elasticsearch: Fix bucket script variable duplication in UI (#32705) (#32714)
- Variables: Confirms selection before opening new picker (#32586) (#32710)
- CloudWarch: Fix service quotas link (#32686) (#32689)
- Configuration: Prevent browser hanging / crashing with large number of org users (#32546) (#32598)
- chore: bump execa to v2.1.0 (#32543) (#32592)
- Explore: Fix bug where navigating to explore would result in wrong query and datasource to be shown (#32558)
- Fix broken gtime tests (#32582) (#32587)
- resolve conflicts (#32567)
- gtime: Make ParseInterval deterministic (#32539) (#32560)
- Dashboard: No longer includes default datasource when externally exporting dashboard with row (#32494) (#32535)
- TextboxVariable: Limits the length of the preview value (#32472) (#32530)
- AdHocVariable: Adds default data source (#32470) (#32476)
- Variables: Fixes Unsupported data format error for null values (#32480) (#32487)
- Prometheus: align exemplars check to latest api change (#32513) (#32515)
- 'Release: Updated versions in package to 7.5.2' (#32502)
- SigV4: Add support EC2 IAM role auth and possibility to toggle auth providers (#32444) (#32488)
- Set spanNulls to default (#32471) (#32486)
- Graph: Fix setting right y-axis when standard option unit is configured (#32426) (#32442)
- API: Return 409 on datasource version conflict (#32425) (#32433)
- API: Return 400 on invalid Annotation requests (#32429) (#32431)
- Variables: Fixes problem with data source variable when default ds is selected (#32384) (#32424)
- Table: Fixes so links work for image cells (#32370) (#32410)
- Variables: Fixes error when manually non-matching entering custom value in variable input/picker (#32390) (#32394)
- DashboardQueryEditor: Run query after selecting source panel (#32383) (#32395)
- API: Datasource endpoint should return 400 bad request if id and orgId is invalid (#32392) (#32397)
- 'Release: Updated versions in package to 7.5.1' (#32362)
- MSSQL: Upgrade go-mssqldb (#32347) (#32361)
- GraphNG: Fix tooltip displaying wrong or no data (#32312) (#32348)
- 'Release: Updated versions in package to 7.5.0' (#32308)
- Loki: Fix text search in Label browser (#32293) (#32306)
- Explore: Show all dataFrames in data tab in Inspector (#32161) (#32299)
- PieChartV2: Add migration from old piechart (#32259) (#32291)
- LibraryPanels: Adds Type and Description to DB (#32258) (#32288)
- LibraryPanels: Prevents deletion of connected library panels (#32277) (#32284)
- Library Panels: Add 'Discard' button to panel save modal (#31647) (#32281)
- LibraryPanels: Changes to non readonly reducer (#32193) (#32200)
- Notifications: InfluxDB - Fix regex to include metrics with hyphen in aliases (#32224) (#32262)
- SSE/InfluxDB: Change InfluxQL to work with server side expressions (#31691) (#32102)
- DashboardSettings: Fixes issue with tags list not updating when changes are made (#32241) (#32247)
- Logs: If log message missing, use empty string (#32080) (#32243)
- CloudWatch: Use latest version of aws sdk (#32217) (#32223)
- Release: Updated versions in package to 7.5.0-beta.2 (#32158)
- HttpServer: Make read timeout configurable but disabled by default (#31575) (#32154)
- GraphNG: Ignore string fields when building data for uPlot in GraphNG (#32150) (#32151)
- Fix loading timezone info on windows (#32029) (#32149)
- SQLStore: Close session in withDbSession (#31775) (#32108)
- Remove datalink template suggestions for accessing specific fields when there are multiple dataframes. (#32057) (#32148)
- GraphNG: make sure dataset and config are in sync when initializing and re-initializing uPlot (#32106) (#32125)
- MixedDataSource: Name is updated when data source variable changes (#32090) (#32144)
- Backport 32005 to v7.5.x #32128 (#32130)
- Loki: Label browser UI updates (#31737) (#32119)
- ValueMappings: Fixes value 0 not being mapped (#31924) (#31929)
- GraphNG: Fix tooltip series color for multi data frame scenario (#32098) (#32103)
- LibraryPanels: Improves the Get All experience (#32028) (#32093)
- Grafana/ui: display all selected levels for selected value when searching (#32030) (#32032)
- Exemplars: always query exemplars (#31673) (#32024)
- [v7.5.x] TimePicker: Fixes hidden time picker shown in kiosk TV mode (#32055)
- Chore: Collect elasticsearch version usage stats (#31787) (#32063)
- Chore: Tidy up Go deps (#32053)
- GraphNG: Fix PlotLegend field display name being outdated (#32064) (#32066)
- Data proxy: Fix encoded characters in URL path should be proxied encoded (#30597) (#32060)
- [v7.5.x] Auth: Allow soft token revocation (#32037)
- Snapshots: Fix usage of sign in link from the snapshot page (#31986) (#32036)
- Make master green (#32011) (#32015)
- Query editor: avoid avoiding word wrap on query editor components (#31949) (#31982)
- Variables: Fixes filtering in picker with null items (#31979) (#31995)
- TooltipContainer - use resize observer instead of getClientBoundingRect (#31937) (#32003)
- Loki: Fix autocomplete when re-editing Loki label values (#31828) (#31987)
- Loki: Fix type errors in languageprovider (#31902) (#31945)
- lokidatasource: add documentation to labelformat and lineformat (#31710) (#31746)
- Tempo: Convert tempo to backend data source2 (#31733)
- Elasticsearch: Fix script fields in query editor (#31681) (#31727)
- Elasticsearch: revert to isoWeek when resolving weekly indices (#31709) (#31717)
- Admin: Keeps expired api keys visible in table after delete (#31636) (#31675)
- Tempo: set authentication header properly (#31699) (#31701)
- Tempo: convert to backend data source (#31618) (#31695)
- Update package.json (#31672)
- Release: Bump version to 7.5.0-beta.1 (#31664)
- Fix whatsNewUrl version to 7.5 (#31666)
- Chore: add alias for what's new 7.5 (#31669)
- Docs: Update doc for PostgreSQL authentication (#31434)
- Docs: document report template variables (#31637)
- AzureMonitor: Add deprecation message for App Insights/Insights Analytics (#30633)
- Color: Fixes issue where colors where reset to gray when switch panels (#31611)
- Live: Use pure WebSocket transport (#31630)
- Docs: Fix broken image link (#31661)
- Docs: Add Whats new in 7.5 (#31659)
- Docs: Fix links for 7.5 (#31658)
- Update enterprise-configuration.md (#31656)
- Explore/Logs: Escaping of incorrectly escaped log lines (#31352)
- Tracing: Small improvements to trace types (#31646)
- Update index.md (#31645)
- Move NOOPCONTROL to storybook utils and change to a standalone file (#31421)
- remove squadcast details from docs (#31413)
- Add new Cloudwatch AWS/DDoSProtection metrics and dimensions (#31297)
- Logging: add frontend logging helpers to @grafana/runtime package (#30482)
- CallToActionCard: updates story from knobs to controls (#31393)
- Add eu-south-1 cloudwatch region, closes #31197 (#31198)
- Chore: Upgrade eslint packages (#31408)
- Cascader: updates story from knobs to controls (#31399)
- addressed issues 28763 and 30314. (#31404)
- Added section Query a time series database by id (#31337)
- Prometheus: Change default httpMethod for new instances to POST (#31292)
- Data source list: Use Card component (#31326)
- Chore: Remove gotest.tools dependency (#31391)
- Revert 'StoryBook: Introduces Grafana Controls (#31351)' (#31388)
- Chore(deps): Bump github.com/prometheus/common from 0.15.0 to 0.17.0 (#31387)
- AdHocVariables: Fixes crash when values are stored as numbers (#31382)
- Chore(deps): Bump github.com/golang/mock from 1.4.4 to 1.5.0 (#31379)
- Chore: Fix strict errors, down to 416 (#31365)
- Chore(deps): Bump github.com/getsentry/sentry-go from 0.9.0 to 0.10.0 (#31378)
- StoryBook: Introduces Grafana Controls (#31351)
- ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31313)
- Theming: Support for runtime theme switching and hooks for custom themes (#31301)
- Devenv: Remove old-versioned loki blocks and update prometheus2 block (#31282)
- Zipkin: Show success on test data source (#30829)
- Update grot template (needs more info) (#31350)
- DatasourceSrv: Fix instance retrieval when datasource variable value set to 'default' (#31347)
- TimeSeriesPanel: Fixes overlapping time axis ticks (#31332)
- Grafana/UI: Add basic legend to the PieChart (#31278)
- SAML: single logout only enabled in enterprise (#31325)
- QueryEditor: handle query.hide changes in angular based query-editors (#31336)
- DashboardLinks: Fixes another issue where dashboard links cause full page reload (#31334)
- LibraryPanels: Syncs panel title with name (#31311)
- Chore: Upgrade golangci-lint (#31330)
- Add info to docs about concurrent session limits (#31333)
- Table: Fixes issue with fixed min and auto max with bar gauge cell (#31316)
- BarGuage: updates story from knobs to controls (#31223)
- Docs: Clarifies how to add Key/Value pairs (#31303)
- Usagestats: Exclude folders from total dashboard count (#31320)
- ButtonCascader: updates story from knobs to controls (#31288)
- test: allow check for Table as well as Graph for Explore e2e flow (#31290)
- Grafana-UI: Update tooltip type (#31310)
- fix 7.4.2 release note (#31299)
- Add --tries 3 arg when triggering e2e-tests upon releasing (#31285)
- Chore: reduce strict errors for variables (#31241)
- update latest release version (#31296)
- ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31291)
- Correct name of Discord notifier tests (#31277)
- Docs: Clarifies custom date formats for variables (#31271)
- BigValue: updates story from knobs to controls (#31240)
- Docs: Annotations update (#31194)
- Introduce functions for interacting with library panels API (#30993)
- Search: display sort metadata (#31167)
- Folders: Editors should be able to edit name and delete folders (#31242)
- Make Datetime local (No date if today) working (#31274)
- UsageStats: Purpose named variables (#31264)
- Snapshots: Disallow anonymous user to create snapshots (#31263)
- only update usagestats every 30min (#31131)
- Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#30701)
- Grafana-UI: Add id to Select to make it easier to test (#31230)
- Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055)
- UI/Card: Fix handling of 'onClick' callback (#31225)
- Loki: Add line limit for annotations (#31183)
- Remove deprecated and breaking loki config field (#31227)
- SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236)
- LibraryPanels: Disconnect before connect during dashboard save (#31235)
- Disable Change Password for OAuth users (#27886)
- TagsInput: Design update and component refactor (#31163)
- Variables: Adds back default option for data source variable (#31208)
- IPv6: Support host address configured with enclosing square brackets (#31226)
- Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179)
- GraphNG: refactor core to class component (#30941)
- Remove last synchronisation field from LDAP debug view (#30984)
- Chore: Upgrade grafana-plugin-sdk-go to v0.88.0 (#30975)
- Graph: Make axes unit option work even when field option unit is set (#31205)
- AlertingNG: Test definition (#30886)
- Docs: Update Influx config options (#31146)
- WIP: Skip this call when we skip migrations (#31216)
- use 0.1.0 (#31215)
- DataSourceSrv: Filter out non queryable data sources by default (#31144)
- QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193)
- Chore: report eslint no-explicit-any errors to metrics (#31182)
- Chore(deps): Bump cloud.google.com/go/storage from 1.12.0 to 1.13.0 (#31211)
- Chore(deps): Bump xorm.io/xorm from 0.8.1 to 0.8.2 (#30773)
- Alerting: Fix modal text for deleting obsolete notifier (#31171)
- Chore(deps): Bump github.com/linkedin/goavro/v2 from 2.9.7 to 2.10.0 (#31204)
- Variables: Fixes missing empty elements from regex filters (#31156)
- StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126)
- Fixed the typo. (#31189)
- Docs: Rewrite preferences docs (#31154)
- Explore/Refactor: Simplify URL handling (#29173)
- DashboardLinks: Fixes links always cause full page reload (#31178)
- Replace PR with Commit truncated hash when build fails (#31177)
- Alert: update story to use controls (#31145)
- Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132)
- CloudWatch: Ensure empty query row errors are not passed to the panel (#31172)
- Update prometheus.md (#31173)
- Variables: Extend option pickers to accept custom onChange callback (#30913)
- Prometheus: Multiply exemplars timestamp to follow api change (#31143)
- DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160)
- Add author name and pr number in drone pipeline notifications (#31124)
- Prometheus: Add documentation for ad-hoc filters (#31122)
- DataSourceSettings: Fixes add header button, it should not trigger a save & test action (#31135)
- Alerting: Fix so that sending an alert with the Alertmanager notifier doesn't fail when one of multiple configured URL's are down (#31079)
- Chore: Update latest.json (#31139)
- Docs: add 7.4.1 relese notes link (#31137)
- PieChart: Progress on new core pie chart (#28020)
- ReleaseNotes: Updated changelog and release notes for 7.4.1 (#31133)
- Eslint: no-duplicate-imports rule (bump grafana-eslint-config) (#30989)
- Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before (#31121)
- MuxWriter: Handle error for already closed file (#31119)
- Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115)
- Search: add sort information in dashboard results (#30609)
- area/grafana/e2e: ginstall should pull version specified (#31056)
- Exemplars: Change CTA style (#30880)
- Influx: Make max series limit configurable and show the limiting message if applied (#31025)
- Docs: request security (#30937)
- update configurePanel for 7.4.0 changes (#31093)
- Elasticsearch: fix log row context erroring out (#31088)
- Prometheus: Fix issues with ad-hoc filters (#30931)
- LogsPanel: Add deduplication option for logs (#31019)
- Drone: Make sure CDN upload is ok before pushing docker images (#31075)
- PluginManager: Remove some global state (#31081)
- test: update addDashboard flow for v7.4.0 changes (#31059)
- Transformations: Fixed typo in FilterByValue transformer description. (#31078)
- Docs: Group id should be 0 instead of 1 in Docker upgrade notes (#31074)
- Usage stats: Adds source/distributor setting (#31039)
- CDN: Add CDN upload step to enterprise and release pipelines (#31058)
- Chore: Replace native select with grafana ui select (#31030)
- Docs: Update json-model.md (#31066)
- Docs: Update whats-new-in-v7-4.md (#31069)
- Added hyperlinks to Graphite documentation (#31064)
- DashboardSettings: Update to new form styles (#31022)
- CDN: Fixing drone CI config (#31052)
- convert path to posix by default (#31045)
- DashboardLinks: Fixes crash when link has no title (#31008)
- Alerting: Fixes so notification channels are properly deleted (#31040)
- Explore: Remove emotion error when displaying logs (#31026)
- Elasticsearch: Fix alias field value not being shown in query editor (#30992)
- CDN: Adds uppload to CDN step to drone CI (#30879)
- Improved glossary (#31004)
- BarGauge: Improvements to value sizing and table inner width calculations (#30990)
- Drone: Fix deployment image (#31027)
- ColorPicker: migrated styles from sass to emotion (#30909)
- Dashboard: Migrate general settings to react (#30914)
- Chore(deps): Bump github.com/jung-kurt/gofpdf from 1.10.1 to 1.16.2 (#30586)
- Chore(deps): Bump github.com/aws/aws-sdk-go from 1.36.31 to 1.37.7 (#31018)
- Prometheus: Min step defaults to seconds when no unit is set to prevent errors when running alerts. (#30966)
- Chore(deps): Bump github.com/magefile/mage from 1.10.0 to 1.11.0 (#31017)
- Chore(deps): Bump github.com/grpc-ecosystem/go-grpc-middleware (#31013)
- Graph: Fixes so graph is shown for non numeric time values (#30972)
- CloudMonitoring: Prevent resource type variable function from crashing (#30901)
- Chore(deps): Bump google.golang.org/api from 0.33.0 to 0.39.0 (#30971)
- Build: Releases e2e and e2e-selectors too (#31006)
- TextPanel: Fixes so panel title is updated when variables change (#30884)
- Docs: Update configuration.md (loginmaximuminactivelifetimeduration, loginmaximumlifetimeduration) (#31000)
- Elasticsearch: Show Size setting for rawdata metric (#30980)
- Alerts: Dedupe alerts so that we do not fill the screen with the same alert messsage (#30935)
- make sure service and slo display name is passed to segment comp (#30900)
- assign changes in cloud datasources to the new cloud datasources team (#30645)
- Table: Updates devenv test dashboard after change to TestData Randrom Table response (#30927)
- Theme: Use higher order theme color variables rather then is light/dark logic (#30939)
- Docs: Add alias for what's new in 7.4 (#30945)
- e2e: extends selector factory to plugins (#30932)
- Chore: Upgrade docker build image (#30820)
- Docs: updated developer guide (#29978)
- Alerts: Update Alert storybook to show more states (#30908)
- Variables: Adds queryparam formatting option (#30858)
- Chore: pad unknown values with undefined (#30808)
- Transformers: add search to transform selection (#30854)
- Exemplars: change api to reflect latest changes (#30910)
- docs: use selinux relabelling on docker containers (#27685)
- Docs: Fix bad image path for alert notification template (#30911)
- Make value mappings correctly interpret numeric-like strings (#30893)
- Chore: Update latest.json (#30905)
- Docs: Update whats-new-in-v7-4.md (#30882)
- Dashboard: Ignore changes to dashboard when the user session expires (#30897)
- ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30902)
- test: add support for timeout to be passed in for addDatasource (#30736)
- increase page size and make sure the cache supports query params (#30892)
- DataSourceSettings: Adds info box and link to Grafana Cloud (#30891)
- OAuth: custom username docs (#28400)
- Panels: Remove value mapping of values that have been formatted #26763 (#30868)
- Alerting: Fixes alert panel header icon not showing (#30840)
- AlertingNG: Edit Alert Definition (#30676)
- Logging: sourcemap support for frontend stacktraces (#30590)
- Added 'Restart Grafana' topic. (#30844)
- Docs: Org, Team, and User Admin (#30756)
- bump grabpl version to 0.5.36 (#30874)
- Plugins: Requests validator (#30445)
- Docs: Update whats-new-in-v7-4.md (#30876)
- Docs: Add server view folder (#30849)
- Fixed image name and path (#30871)
- Grafana-ui: fixes closing modals with escape key (#30745)
- InfluxDB: Add http configuration when selecting InfluxDB v2 flavor (#30827)
- TestData: Fixes issue with for ever loading state when all queries are hidden (#30861)
- Chart/Tooltip: refactored style declaration (#30824)
- ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30853)
- Grafana-ui: fixes no data message in Table component (#30821)
- grafana/ui: Update pagination component for large number of pages (#30151)
- Alerting: Customise OK notification priorities for Pushover notifier (#30169)
- DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569)
- Chore: Remove panelTime.html, closes #30097 (#30842)
- Docs: Time series panel, bar alignment docs (#30780)
- Chore: add more docs annotations (#30847)
- Transforms: allow boolean in field calculations (#30802)
- Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825)
- Update prometheus.md with image link fix (#30833)
- BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806)
- Update license-expiration.md (#30839)
- Explore rewrite (#30804)
- Prometheus: Set type of labels to string (#30831)
- GrafanaUI: Add a way to persistently close InfoBox (#30716)
- Fix typo in transformer registry (#30712)
- Elasticsearch: Display errors with text responses (#30122)
- CDN: Fixes cdn path when Grafana is under sub path (#30822)
- TraceViewer: Fix lazy loading (#30700)
- FormField: migrated sass styling to emotion (#30392)
- AlertingNG: change API permissions (#30781)
- Variables: Clears drop down state when leaving dashboard (#30810)
- Grafana-UI: Add story/docs for ErrorBoundary (#30304)
- Add missing callback dependency (#30797)
- PanelLibrary: Adds library panel meta information to dashboard json (#30770)
- Chore(deps): Bump gonum.org/v1/gonum from 0.6.0 to 0.8.2 (#30343)
- Chore(deps): Bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 (#30771)
- GraphNG: improve behavior when switching between solid/dash/dots (#30796)
- Chore(deps): Bump github.com/hashicorp/go-hclog from 0.14.1 to 0.15.0 (#30778)
- Add width for Variable Editors (#30791)
- Chore: Remove warning when calling resource (#30752)
- Auth: Use SigV4 lib from grafana-aws-sdk (#30713)
- Panels: Fixes so panels are refreshed when scrolling past them fast (#30784)
- GraphNG: add bar alignment option (#30499)
- Expressions: Measure total transformation requests and elapsed time (#30514)
- Menu: Mark menu components as internal (#30740)
- TableInputCSV: migrated styles from sass to emotion (#30554)
- CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777)
- Chore(deps): Bump gopkg.in/ini.v1 from 1.57.0 to 1.62.0 (#30772)
- CDN: Adds support for serving assets over a CDN (#30691)
- PanelEdit: Trigger refresh when changing data source (#30744)
- Chore: remove debugbin (#30725)
- Docs: add hiddenusers configuration field (#30435)
- Docs: Define TLS/SSL terminology (#30533)
- Docs: Fix expressions enabled description (#30589)
- Docs: Update ES screenshots (#30598)
- Licensing Docs: Adding license restrictions docs (#30216)
- Update documentation-style-guide.md (#30611)
- Docs: Update queries.md (#30616)
- chore(grafana-ui): bump storybook to 6.1.15 (#30642)
- DashboardSettings: fixes vertical scrolling (#30640)
- Usage Stats: Remove unused method for getting user stats (#30074)
- Grafana/UI: Unit picker should not set a category as unit (#30638)
- Graph: Fixes auto decimals issue in legend and tooltip (#30628)
- AlertingNG: List saved Alert definitions in Alert Rule list (#30603)
- chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605)
- Grafana/UI: Add disable prop to Segment (#30539)
- Variables: Fixes so queries work for numbers values too (#30602)
- Admin: Fixes so form values are filled in from backend (#30544)
- Docs: Add new override info and add whats new 7.4 links (#30615)
- TestData: Improve what's new in v7.4 (#30612)
- Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502)
- NodeGraph: Add docs (#30504)
- Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517)
- TimeRangePicker: Updates components to use new ToolbarButton & ButtonGroup (#30570)
- Update styling.md guide (#30594)
- TestData: Adding what's new in v7.4 to the devenv dashboards (#30568)
- Chore(deps): Bump github.com/aws/aws-sdk-go from 1.35.5 to 1.36.31 (#30583)
- Chore(deps): Bump github.com/prometheus/client_golang (#30585)
- Chore(deps): Bump gopkg.in/macaron.v1 from 1.3.9 to 1.4.0 (#30587)
- Chore(deps): Bump github.com/google/uuid from 1.1.5 to 1.2.0 (#30584)
- Explore: Fix logs hover state so that it is visible and in dark mode & simply hover code (#30572)
- RefreshPicker: Fixes so valid intervals in url are visible in RefreshPicker (#30474)
- Add documentation for Exemplars (#30317)
- OldGraph: Fix height issue in Firefox (#30565)
- XY Chart: fix editor error with empty frame (no fields) (#30573)
- ButtonSelect & RefreshPicker: Rewrite of components to use new emotion based ToolbarButton & Menu (#30510)
- XY Chart: share legend config with timeseries (#30559)
- configuration.md: Document Content Security Policy options (#30413)
- DataFrame: cache frame/field index in field state (#30529)
- List + before -; rm old Git ref; reformat. (#30543)
- Expressions: Add option to disable feature (#30541)
- Explore: Fix loading visualisation on the top of the new time series panel (#30553)
- Prometheus: Fix show query instead of Value if no name and metric (#30511)
- Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1 (#30519)
- Postgres: Convert tests to stdlib (#30536)
- Storybook: Migrate card story to use controls (#30535)
- AlertingNG: Enable UI to Save Alert Definitions (#30394)
- Postgres: Be consistent about TLS/SSL terminology (#30532)
- Loki: Append refId to logs uid (#30418)
- Postgres: Fix indentation (#30531)
- GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527)
- updates for e2e docker image (#30465)
- GraphNG: uPlot 1.6.2 (#30521)
- Docs: Update whats-new-in-v7-4.md (#30520)
- Prettier: ignore build and devenv dirs (#30501)
- Chore: Upgrade grabpl version (#30486)
- Explore: Update styling of buttons (#30493)
- Cloud Monitoring: Fix legend naming with display name override (#30440)
- GraphNG: Disable Plot logging by default (#30390)
- Admin: Fixes so whole org drop down is visible when adding users to org (#30481)
- Docs: include Makefile option for local assets (#30455)
- Footer: Fixes layout issue in footer (#30443)
- TimeSeriesPanel: Fixed default value for gradientMode (#30484)
- Docs: fix typo in what's new doc (#30489)
- Chore: adds wait to e2e test (#30488)
- chore: update packages dependent on dot-prop to fix security vulnerability (#30432)
- Dashboard: Remove Icon and change copy -> Copy to clipboard in the share embedded panel modal (#30480)
- Chore: fix spelling mistake (#30473)
- Chore: Restrict internal imports from other packages (#30453)
- Docs: What's new fixes and improvements (#30469)
- Timeseries: only migrage point size when configured (#30461)
- Alerting: Hides threshold handle for percentual thresholds (#30431)
- Graph: Fixes so only users with correct permissions can add annotations (#30419)
- Chore: update latest version to 7.4.0-beta1 (#30452)
- Docs: Add whats new 7.4 links (#30463)
- Update whats-new-in-v7-4.md (#30460)
- docs: 7.4 what's new (Add expressions note) (#30446)
- Chore: Upgrade build pipeline tool (#30456)
- PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441)
- Expressions: Fix button icon (#30444)
- ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30449)
- Docs: Fix img link for alert notification template (#30436)
- grafana/ui: Fix internal import from grafana/data (#30439)
- prevent field config from being overwritten (#30437)
- PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry (#30389)
- Dashboard: Remove template variables option from ShareModal (#30395)
- Added doc content for variables inspector code change by Hugo (#30408)
- Docs: update license expiration behavior for reporting (#30420)
- Chore: use old version format in package.json (#30430)
- Chore: upgrade NPM security vulnerabilities (#30397)
- 'Release: Updated versions in package to 7.5.0-pre.0' (#30428)
- contribute: Add backend and configuration guidelines for PRs (#30426)
- Chore: Update what's new URL (#30424)
Update to version 7.4.5
- Security: Fix API permissions issues related to team-sync CVE-2021-28146, CVE-2021-28147. (Enterprise)
- Security: Usage insights requires signed in users CVE-2021-28148. (Enterprise)
- Security: Do not allow editors to incorrectly bypass permissions on the default data source. CVE-2021-27962. (Enterprise)

koan:

Readding the requires for runtime dependencies on python3-netifaces and python3-distro (bsc#1191448)
Only recommend virt-install to unbreak scenarios where it is not available in the enabled modules of the system
Updated to Koan 3.0.1 https://github.com/cobbler/koan/releases/tag/v3.0.1
The xend functionallity is not expected to work since this the underying tool was removed: https://github.com/cobbler/koan/issues/73
Python 2 compability was fully removed
Add support for EFI reinstallation of a client (bsc#1170823)
Removed patches (all named are being part of upstream or redundant)

mgr-cfg:

Version 4.3.2-1
- Remove unused legacy code
Version 4.3.1-1
Bump version to 4.3.0

mgr-custom-info:

Version 4.3.2-1
- Remove unused legacy code
Version 4.3.1-1
Bump version to 4.3.0

mgr-daemon:

Version 4.3.2-1
- Update translation strings
Version 4.3.1-1
Bump version to 4.3.0

mgr-osad:

Version 4.3.2-1
- Removed spacewalk-selinux dependencies.
- Updated source url.
Version 4.3.1-1
Bump version to 4.3.0

mgr-push:

Version 4.3.1-1
Bump version to 4.3.0

mgr-virtualization:

Version 4.3.1-1
Bump version to 4.3.0

python-contextvars:

Provide version 2.4

python-immutables:

Provide version 0.11

rhnlib:

Version 4.3.1-1
Bump version to 4.3.0

salt:

Simplify 'transactional_update' module to not use SSH wrapper and allow more flexible execution
Add '--no-return-event' option to salt-call to prevent sending return event back to master.
Make 'state.highstate' to acts on concurrent flag.
Fix print regression for yumnotify plugin
Use dnfnotify instead yumnotify for relevant distros
Dnfnotify pkgset plugin implementation
Add rpm_vercmp python library support for version comparison
Prevent pkg plugins errors on missing cookie path (bsc#1186738)
Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
Make 'salt-api' package to require python3-cherrypy on RHEL systems
Make 'tar' as required for 'salt-transactional-update' package
Fix issues with salt-ssh's extra-filerefs
Fix crash when calling manage.not_alive runners
Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
Do not break master_tops for minion with version lower to 3003
Support querying for JSON data in external sql pillar
Update to Salt release version 3003.3
See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
Exclude the full path of a download URL to prevent injection of malicious code (bsc#1190265) (CVE-2021-21996)
Fix wrong relative paths resolution with Jinja renderer when importing subdirectories
Don't pass shell='/sbin/nologin' to onlyif/unless checks (bsc#1188259)
Add missing aarch64 to rpm package architectures
Backport of upstream PR#59492
Fix failing unit test for systemd
Fix error handling in openscap module (bsc#1188647)
Better handling of bad public keys from minions (bsc#1189040)
Define license macro as doc in spec file if not existing
Add standalone formulas configuration for salt minion and remove salt-master requirement (bsc#1168327)
Do noop for services states when running systemd in offline mode (bsc#1187787)
Transactional_updates: do not execute states in parallel but use a queue (bsc#1188170)
Handle 'master tops' data when states are applied by 'transactional_update' (bsc#1187787)
Enhance openscap module: add 'xccdf_eval' call
Virt: pass emulator when getting domain capabilities from libvirt
Adding preliminary support for Rocky Linux
Implementation of held/unheld functions for state pkg (bsc#1187813)
Replace deprecated Thread.isAlive() with Thread.is_alive()
Fix exception in yumpkg.remove for not installed package
Fix save for iptables state module (bsc#1185131)
Virt: use /dev/kvm to detect KVM
Zypperpkg: improve logic for handling vendorchange flags
Add bundled provides for tornado to the spec file
Enhance logging when inotify beacon is missing pyinotify (bsc#1186310)
Add 'python3-pyinotify' as a recommended package for Salt in SUSE/openSUSE distros
Fix tmpfiles.d configuration for salt to not use legacy paths (bsc#1173103)
Detect Python version to use inside container (bsc#1167586) (bsc#1164192)
Handle volumes on stopped pools in virt.vm_info (bsc#1186287)
Grains.extra: support old non-intel kernels (bsc#1180650)
Fix missing minion returns in batch mode (bsc#1184659)
Parsing Epoch out of version provided during pkg remove (bsc#1173692)
Check if dpkgnotify is executable (bsc#1186674)
Update to Salt release version 3002.2 (jsc#ECO-3212) (jsc#SLE-18033)
Add subpackage salt-transactional-update (jsc#SLE-18028)

spacecmd:

Version 4.3.4-1
- Update translation strings
Version 4.3.3-1
- Improved event history listing and added new systemeventdetails command to retrieve the details of an event
- configchannelupdatefile handles directory properly (bsc#1190512)
Version 4.3.2-1
- Add schedulearchivecompleted to mass archive actions (bsc#1181223)
- Make scheduledeletearchived to get all actions without display limit
- Allow passing a date limit for schedule_deletearchived on spacecmd (bsc#1181223)
- Remove whoami from the list of unauthenticated commands (bsc#1188977)
Version 4.3.1-1
Use correct API endpoint in list_proxies (bsc#1188042)
Add schedule_deletearchived to bulk delete archived actions (bsc#1181223)
Make spacecmd aware of retracted patches/packages
Version 4.2.10-1
Enhance help for installation types when creating distributions (bsc#1186581)
Version 4.2.9-1
Parse empty argument when nothing in between the separator

spacewalk-client-tools:

Version 4.3.4-1
- Update translation strings
Version 4.3.3-1
- Remove unused legacy code
Version 4.3.2-1
Version 4.3.1-1
Bump version to 4.3.0
Version 4.2.11-1
Update translation strings

spacewalk-koan:

Version 4.3.1-1
Fix for spacewalk-koan tests after switching to the new Docker images

spacewalk-oscap:

Version 4.3.1-1
Bump version to 4.3.0

spacewalk-remote-utils:

Version 4.3.1-1
Bump version to 4.3.0

supportutils-plugin-susemanager-client:

Version 4.3.1-1
Bump version to 4.3.0

suseRegisterInfo:

Version 4.3.1-1
Bump version to 4.3.0

uyuni-common-libs:

Version 4.3.1-1
Handle broken RPM packages to prevent exceptions causing fails on repository synchronization (bsc#1186650)
Version 4.2.4-1
Maintainer field in debian packages are only recommended (bsc#1186508)

zypp-plugin-spacewalk:

1.0.10
- Use proxy configured in up2date config when it is defined
Added RHEL8 build.

References

SUSE-SU-2021:3908-1

Affected packages