- Version 2.12
  * Update translations
  * CVE-2023-28120: Update active support to fix possible XSS Security Vulnerability
    in bytesliced strings for html_safe. (bsc#1209507)
  * CVE-2023-27530: Update rack to mitigate possible DoS in multipart mime parsing (bsc#1209096)
  * Force rmt-client-setup-res script to use https (bsc#1209825)
  * Download repomd.xml.asc before repomd.xml.key, because there are repos that only have repomd.xml.asc

- Version 2.11:
  * Mark secrets.yml.key file as part of the rpm to allow seamless downgrades (bsc#1207670)
  * Adding -f to the file move command when moving the mirrored directory to its final location (bsc#1203171) 
  * Fix %post install of pubcloud subpackage reload of nginx (bsc#1206593)
  * Skip warnings regarding nokogiri libxml version mismatch (bsc#1202053)

- Release version 2.10:
  - Add option to turn off system token support (bsc#1205089)
  - Update the `last_seen_at` column on zypper service refresh
  - Do not retry to import non-existing files in air-gapped mode (bsc#1204769)
  - Fix CVE-2022-31254 (bsc#1204285): rmt-server-pubcloud allows to escalate from user _rmt to root
  Root-level escalation vector bug was found in the packaging file which has been mitigated.

- adapt rmt-client-setup-res script to work on SLL9/RHEL9

- Send system creation and product activation dates to SCC for better
  visibility in SCC.

• Files Changed
• Browse Source