openSUSE-SU-2025:20031-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2025:20031-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/openSUSE-SU-2025:20031-1
Upstream
Related
Published
2025-10-27T09:58:12Z
Modified
2026-03-12T02:06:44Z
Summary
Security update for warewulf4
Details

This update for warewulf4 fixes the following issues:

Changes in warewulf4:

  • Update to version 4.6.4:

    • v4.6.4 release updates
    • Convert disk booleans from wwbool to *bool which allows bools in disk to be set to false via command line (bsc#1248768)
    • Update NetworkManager Overlay
      • Disable ipv4 in NetworkManager if no address or route is specified
    • fix(wwctl): Create overlay edit tempfile in tmpdir
    • Add default for systemd name for warewulf in warewulf.conf
    • Atomic overlay file application in wwclient
    • Simpler names for overlay methods
    • Fix warewulfd api behavior when deleting distribution overlay

  • Update to version 4.6.3:

    • v4.6.3 release
    • IPv6 iPXE support
    • Fix a syntax error in the RPM specfile
    • Fix a race condition in wwctl overlay edit
    • Fixed handling of comma-separated mount options in fstab and ignition overlays
    • Move reexec.Init() to beginning of wwctl
    • Add documentation for using tmpfs to distribute across numa nodes
    • added warewuld configure option
    • Fix wwctl upgrade nodes to handle kernel argument lists (bsc#1227686 bsc#1227465)
    • Address copilot review from #1945
    • Refactor wwapi tests for proper isolation
    • Bugfix: cloning a site overlay when parent dir does not exist
    • Clone to a site overlay when adding files in wwapi
    • Consolidated createOverlayFile and updateOverlayFile to addOverlayFile
    • Support for creating and updating overlay file in wwapi
    • Only return overlay files that refer to a path within the overlay
    • add overlay file deletion support
    • DELETE /api/overlays/{id}?force=true can delete overlays in use
    • Restore idempotency of PUT /api/nodes/{id}
    • Simplify overlay mtime api and add tests
    • add node overlay buildtime
    • Improved netplan support
    • Rebuild overlays for discovered nodes
    • Restrict userdocs from building during pr when not modified
    • Update to v4.6.2 GitHub release notes
References

Affected packages

openSUSE:Leap 16.0 / warewulf4

Package

Name
warewulf4
Purl
pkg:rpm/opensuse/warewulf4&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.6.4-bp160.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "warewulf4": "4.6.4-bp160.1.1",
            "warewulf4-dracut": "4.6.4-bp160.1.1",
            "warewulf4-man": "4.6.4-bp160.1.1",
            "warewulf4-overlay": "4.6.4-bp160.1.1",
            "warewulf4-overlay-rke2": "4.6.4-bp160.1.1",
            "warewulf4-overlay-slurm": "4.6.4-bp160.1.1",
            "warewulf4-reference-doc": "4.6.4-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2025:20031-1.json"