Re: [Spacewalk-list] Spacewalk 2.10 Released!

[Elsever Sadigov]

Jan-Albert,

Thank you for explanation, it works for me. Btw update process takes 
long time, if anyone wonders.


--
*Best Regards,*
***Sadigov Elsevar*

*
*

On 3/19/2020 11:55, Ree, Jan-Albert van wrote:


I followed these steps :


cat 
/etc/sysconfig/rhn/schema-upgrade/spacewalk-schema-2.9-to-spacewalk-schema-2.10/006-distribution-keys.sql.postgresql


​su - postgres

psql -d rhnschema


Then just copy all the queries , one at a time , from the cat above in 
the postgresql session and then quit postgresql and continued the 
upgrade as if the database upgrade was successful.



Regards,

--

Jan-Albert



Jan-Albertvan Ree| HPC Specialist| Digital Services
MARIN| T +31 317 49 35 48| j.a.v@marin.nl 
<mailto:j.a.v@marin.nl> | www.marin.nl <http://www.marin.nl>


LinkedIn <https://www.linkedin.com/company/marin> YouTube 
<http://www.youtube.com/marinmultimedia> Twitter 
<https://twitter.com/MARIN_nieuws> Facebook 
<https://www.facebook.com/marin.wageningen>
MARIN news: Courses Hydrodynamics  Floating Offshore Structures & Ship 
design 
<https://www.marin.nl/courses-hydrodynamics-floating-offshore-structures-and-ship-design> 



*From:* spacewalk-list-boun...@redhat.com 
 on behalf of Elsever Sadigov 


*Sent:* Thursday, March 19, 2020 08:08
*To:* spacewalk-list@redhat.com
*Subject:* Re: [Spacewalk-list] Spacewalk 2.10 Released!

Hi Jan-Albert,

Can you share what exactly you did?

I'm facing same issue:


--
*Best Regards,*
***Sadigov Elsevar*

On 3/19/2020 00:45, Ree, Jan-Albert van wrote:

Congrats to the devel team.

Just performed an upgrade and am back up and running with 2.10

Ran in to one minor issue ,

  
spacewalk-schema-2.9-to-spacewalk-schema-2.10/006-distribution-keys.sql.postgresql
(1 row)

INSERT 0 1
INSERT 0 1
psql:/var/log/spacewalk/schema-upgrade/20200318-170518-script.sql:289: ERROR:  duplicate 
key value violates unique constraint "rhn_pkey_keyid_uq"
DETAIL:  Key (key_id)=(05b555b38483c65d) already exists.

Solved it by running all the queries in that (last) upgrade script manually

Thanks for all the hard work!
--
Jan-Albert van Ree


Jan-Albert van Ree  | HPC Specialist | Digital Services
MARIN | T +31 317 49 35 48 |mailto:j.a.v@marin.nl  |http://www.marin.nl


From:spacewalk-list-boun...@redhat.comon 
behalf of Michael Mraka
Sent: Wednesday, March 18, 2020 16:10
To:spacewalk-announce-l...@redhat.com;spacewalk-list@redhat.com;spacewalk-de...@redhat.com
Subject: [Spacewalk-list] Spacewalk 2.10 Released!

Hello everyone,

We are proudly announcing release of Spacewalk 2.10, a systems management 
solution.

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list



**


*Help us improve the spam filter. If this message contains SPAM, click 
here 
<https://www.mailcontrol.com/sr/BHYZOjXwzSPGX2PQPOmvUmQbZlJUA6MY-6selOctPjlczNG52tIWkM23y1bo3ioD_VsvySeweOuNc_rJiVGaJg==> 
to report. Thank you, MARIN Support Group*



___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

**

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] Spacewalk 2.10 Released!

[Elsever Sadigov]

Hi Jan-Albert,

Can you share what exactly you did?

I'm facing same issue:


--
*Best Regards,*
***Sadigov Elsevar*

On 3/19/2020 00:45, Ree, Jan-Albert van wrote:

Congrats to the devel team.

Just performed an upgrade and am back up and running with 2.10

Ran in to one minor issue ,

  
spacewalk-schema-2.9-to-spacewalk-schema-2.10/006-distribution-keys.sql.postgresql
(1 row)

INSERT 0 1
INSERT 0 1
psql:/var/log/spacewalk/schema-upgrade/20200318-170518-script.sql:289: ERROR:  duplicate 
key value violates unique constraint "rhn_pkey_keyid_uq"
DETAIL:  Key (key_id)=(05b555b38483c65d) already exists.

Solved it by running all the queries in that (last) upgrade script manually

Thanks for all the hard work!
--
Jan-Albert van Ree


Jan-Albert van Ree  | HPC Specialist | Digital Services
MARIN | T +31 317 49 35 48 | mailto:j.a.v@marin.nl | http://www.marin.nl


From: spacewalk-list-boun...@redhat.com  on behalf 
of Michael Mraka 
Sent: Wednesday, March 18, 2020 16:10
To: spacewalk-announce-l...@redhat.com; spacewalk-list@redhat.com; 
spacewalk-de...@redhat.com
Subject: [Spacewalk-list] Spacewalk 2.10 Released!

Hello everyone,

We are proudly announcing release of Spacewalk 2.10, a systems management 
solution.

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list



**
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] CVE-2020-1693

[Elsever Sadigov]

We have same after last scan, plus ciphers and etc. vulnerabilities
Is there anyone who working on security side of this product?

--
*Best Regards,*
***Elsevar ***Sadigov**

On 3/3/2020 03:10, Laurence Rosen wrote:


Was just alerted to this by our security org.  Are there any plans to 
patch this?
My seniors are looking into replacing spacewalk with something else if 
not.
As I'm not a programmer, I'm not sure how to apply the linked patch.  
Does that patch need to be compiled into a new jar?



A flaw was found in Spacewalk up to version 2.9 where it was 
vulnerable to XML internal entity attacks via the /rpc/api endpoint. 
An unauthenticated remote attacker could use this flaw to retrieve the 
content of certain files and trigger a denial of service, or in 
certain circumstances, execute arbitrary code on the Spacewalk server.


This is a 9.8 Critical and needs to be fixed as soon as possible.

Please view the links below for information and steps for remediation:

https://nvd.nist.gov/vuln/detail/CVE-2020-1693

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1693

https://zeroauth.ltd/blog/2020/02/18/proof-of-concept-exploit-for-cve-2020-1693-spacewalk/

Upsteam Fix: 
https://github.com/spacewalkproject/spacewalk/commit/74e28ec61d916c42061ef4347121650a1c962b0c



***

This e-mail and any of its attachments may contain Interactions LLC 
proprietary information, which is privileged, confidential, or subject 
to copyright belonging to the Interactions LLC. This e-mail is 
intended solely for the use of the individual or entity to which it is 
addressed. If you are not the intended recipient of this e-mail, you 
are hereby notified that any dissemination, distribution, copying, or 
action taken in relation to the contents of and attachments to this 
e-mail is strictly prohibited and may be unlawful. If you have 
received this e-mail in error, please notify the sender immediately 
and permanently delete the original and any copy of this e-mail and 
any printout. Thank You.


***

--
This email was Malware checked by Security Department

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

**

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] Encountered an error while trying to update errata

[Elsever Sadigov]

Hi Wenkai,

So what about packages, when you search them in RHEL client, still no 
finding them or they are present, but not updating?

Do you try manually update packages? Do you also assigned GPG keys?

My SW server behind a proxy, when I registered it in itself it started 
pulling them from self. For being sure you can mv repos in 
/etc/yum.repo.d or where repo information are stored.


--
*Best Regards,*

***Sadigov Elsevar*
IT Department Linux Administrator
*"MilliKart" LLC*
AZ , 5A Ali Mustafayev str., Baku, Azerbaijan
*Phone:*   (+994 12) 431 22 20 (ext.549)
*Mobile:*    (+994 77)  600 36 30

millikart_logo2 <http://millikart.az/>cib_logo2 <http://cib.az/>mplus 
<http://mpos.az/>parpar2 <https://www.facebook.com/parparcard/>face2 
<https://www.facebook.com/millikartllc/>youtube2 
<https://www.youtube.com/channel/UCk2RcZMdMHngomnTGvijhow>



On 9/10/2019 05:08, Wenkai Chen wrote:


HI Sadigov,

I have already created and assigned separate channels for RHEL and 
CentOS clients. RHEL channels have their own repositories. Likewise 
for CentOS channels.


Just wondering for the Spacewalk server itself that is registered as a 
client to itself, do you all disable all the other yum repositories 
and only configure it to pull from the Spacewalk repositories? Or do 
you all have both spacewalk repositories and the original yum 
repositories together in Spacewalk server? I do not know if this could 
be an issue.


Thanks.

Regards,

A close up of a sign Description generated with very high confidence


*Chen Wenkai*

Infrastructure Security Engineer

A picture containing building Description generated with high 
confidence <https://www.linkedin.com/company/ensign-infosecurity/>A 
picture containing tableware Description generated with high 
confidence <https://youtu.be/9J7FkhXpb-4>A close up of a sign 
Description generated with high confidence 
<https://www.facebook.com/EnsignGlobal>




*
**  E:*wenkai_c...@ensigninfosecurity.com

*A:* 30A Kallang Place, Level 9 Right Wing, Singapore 339213


*From:*Elsever Sadigov 
*Sent:* Monday, 9 September 2019 8:40 PM
*To:* Wenkai Chen ; 
spacewalk-list@redhat.com
*Subject:* Re: [Spacewalk-list] Encountered an error while trying to 
update errata


Wenkai,

Yes, its common, my colleagues also had problems with RHEL clients. 
Try to separate main channels for RHEL and CentOS for isolate 
different systems to take packs from same source. Hope it helps.


I dunno correct or not. Can you explain how you planned channels for 
update?


And yes, I'm also registered Spacewalk server as client, because it is 
easy to manage.


--
*Best Regards,*
*Sadigov Elsevar*

On 9/9/2019 15:58, Wenkai Chen wrote:

HI,

i am to update CentOS clients, but just having issue with this
RHEL client. Also i noticed, the RHEL client also pulls in
security errata that is related to Red Hat packages, not CentOS.

Is this the correct behaviour? What should i do?

Btw, i am registering the Spacewalk server(which is running on
CentOS) as a client itself. Is this ok?

regards.

Wenkai

*Chen Wenkai*

Infrastructure Security Engineer

*E:*wenkai_c...@ensigninfosecurity.com
<mailto:wenkai_c...@ensigninfosecurity.com>
*A:*30A Kallang Place, Level 9 Right Wing, Singapore 339213

--------

*From:* Elsever Sadigov 
<mailto:e.sadi...@millikart.az>
*Sent:* Monday, September 9, 2019 6:58 PM
*To:* spacewalk-list@redhat.com <mailto:spacewalk-list@redhat.com>
 <mailto:spacewalk-list@redhat.com>;
Wenkai Chen 
<mailto:wenkai_c...@ensigninfosecurity.com>
*Subject:* Re: [Spacewalk-list] Encountered an error while trying
to update errata

Hi,
Maybe a problem with front and back end when client tries to get
updates?
Is db working correctly?

-- 
*Best Regards,*

*Sadigov Elsevar*

On 9/9/2019 14:23, Wenkai Chen wrote:

HI Spacewalk users,

Have encountered the following error while trying to update
security errata.

This action will be executed after 9/9/19 6:15:00 PM AWST
This action's status is: Failed.
The client picked up this action on 9/9/19 6:15 PM
The client completed this action on 9/9/19 6:19 PM
Client execution returned "Failed: Packages failed to install
properly: Package python-perf-0:3.10.0-1062.1.1.el7.x86_64 is
not available for installation Package
kernel-tools-libs-0:3.10.0-1062.1.1.el7.x86_64 is not
available for installation Package
kernel-tools-0:3.10.0-1062.1.1.el7.x86_64 is not available for
installation Package kernel-0:3.10.0-1062.1.1.el7.x86_64 is
not available for installation" (code 32)

Errata Affected:

  * RHSA-2019:2600 - Impor

Re: [Spacewalk-list] Encountered an error while trying to update errata

[Elsever Sadigov]

Wenkai,

Yes, its common, my colleagues also had problems with RHEL clients. Try 
to separate main channels for RHEL and CentOS for isolate different 
systems to take packs from same source. Hope it helps.


I dunno correct or not. Can you explain how you planned channels for update?

And yes, I'm also registered Spacewalk server as client, because it is 
easy to manage.


--
*Best Regards,*
***Sadigov Elsevar*

On 9/9/2019 15:58, Wenkai Chen wrote:

HI,

i am to update CentOS clients, but just having issue with this RHEL 
client. Also i noticed, the RHEL client also pulls in security errata 
that is related to Red Hat packages, not CentOS.

Is this the correct behaviour? What should i do?
Btw, i am registering the Spacewalk server(which is running on CentOS) 
as a client itself. Is this ok?


regards.
Wenkai


*Chen Wenkai*

Infrastructure Security Engineer

*E:*wenkai_c...@ensigninfosecurity.com
*A:*30A Kallang Place, Level 9 Right Wing, Singapore 339213



*From:* Elsever Sadigov 
*Sent:* Monday, September 9, 2019 6:58 PM
*To:* spacewalk-list@redhat.com ; Wenkai 
Chen 
*Subject:* Re: [Spacewalk-list] Encountered an error while trying to 
update errata


Hi,
Maybe a problem with front and back end when client tries to get updates?
Is db working correctly?

--
*Best Regards,*
***Sadigov Elsevar*

On 9/9/2019 14:23, Wenkai Chen wrote:


HI Spacewalk users,

Have encountered the following error while trying to update security 
errata.


This action will be executed after 9/9/19 6:15:00 PM AWST
This action's status is: Failed.
The client picked up this action on 9/9/19 6:15 PM
The client completed this action on 9/9/19 6:19 PM
Client execution returned "Failed: Packages failed to install 
properly: Package python-perf-0:3.10.0-1062.1.1.el7.x86_64 is not 
available for installation Package 
kernel-tools-libs-0:3.10.0-1062.1.1.el7.x86_64 is not available for 
installation Package kernel-tools-0:3.10.0-1062.1.1.el7.x86_64 is not 
available for installation Package 
kernel-0:3.10.0-1062.1.1.el7.x86_64 is not available for 
installation" (code 32)


Errata Affected:

  * RHSA-2019:2600 - Important: kernel security and bug fix update

Any advice as to why this is happening? If the package is not 
installed on the client system, why is it flagged as security errata 
on the system?


A close up of a sign Description generated with very high confidence


*Chen Wenkai*

Infrastructure Security Engineer

A picture containing building Description generated with high 
confidence <https://www.linkedin.com/company/ensign-infosecurity/>A 
picture containing tableware Description generated with high 
confidence <https://youtu.be/9J7FkhXpb-4>A close up of a sign 
Description generated with high confidence 
<https://www.facebook.com/EnsignGlobal>




*
**  E:*wenkai_c...@ensigninfosecurity.com 
<mailto:wenkai_c...@ensigninfosecurity.com>


*A:* 30A Kallang Place, Level 9 Right Wing, Singapore 339213





CONFIDENTIALITY NOTICE: /“This email is confidential and may also be 
privileged. If this email has been sent to you in error, please 
delete it immediately and notify us. Please do not copy, distribute 
or disseminate part or whole of this email if you are not the 
intended recipient or if you have not been authorized to do so. We 
reserve the right, to the extent and under circumstances permitted by 
applicable laws, to monitor, retain, intercept and block email 
messages to and from our systems. Thank you.” /


/
/

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com  <mailto:Spacewalk-list@redhat.com>
https://www.redhat.com/mailman/listinfo/spacewalk-list

**

**
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] Encountered an error while trying to update errata

[Elsever Sadigov]

Hi,
Maybe a problem with front and back end when client tries to get updates?
Is db working correctly?

--
*Best Regards,*
***Sadigov Elsevar*

On 9/9/2019 14:23, Wenkai Chen wrote:


HI Spacewalk users,

Have encountered the following error while trying to update security 
errata.


This action will be executed after 9/9/19 6:15:00 PM AWST
This action's status is: Failed.
The client picked up this action on 9/9/19 6:15 PM
The client completed this action on 9/9/19 6:19 PM
Client execution returned "Failed: Packages failed to install 
properly: Package python-perf-0:3.10.0-1062.1.1.el7.x86_64 is not 
available for installation Package 
kernel-tools-libs-0:3.10.0-1062.1.1.el7.x86_64 is not available for 
installation Package kernel-tools-0:3.10.0-1062.1.1.el7.x86_64 is not 
available for installation Package kernel-0:3.10.0-1062.1.1.el7.x86_64 
is not available for installation" (code 32)


Errata Affected:

  * RHSA-2019:2600 - Important: kernel security and bug fix update

Any advice as to why this is happening? If the package is not 
installed on the client system, why is it flagged as security errata 
on the system?


A close up of a sign Description generated with very high confidence


*Chen Wenkai*

Infrastructure Security Engineer

A picture containing building Description generated with high 
confidence A 
picture containing tableware Description generated with high 
confidence A close up of a sign 
Description generated with high confidence 





*
**  E:*wenkai_c...@ensigninfosecurity.com

*A:* 30A Kallang Place, Level 9 Right Wing, Singapore 339213





CONFIDENTIALITY NOTICE: /“This email is confidential and may also be 
privileged. If this email has been sent to you in error, please delete 
it immediately and notify us. Please do not copy, distribute or 
disseminate part or whole of this email if you are not the intended 
recipient or if you have not been authorized to do so. We reserve the 
right, to the extent and under circumstances permitted by applicable 
laws, to monitor, retain, intercept and block email messages to and 
from our systems. Thank you.” /


/
/

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

**
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] Spacewalk Mail Configuration

[Elsever Sadigov]

Thank you, it works!

I didn't know that postfix using relayhost as gateway. Strange, but 
anyway, it works.


--
Best Regards,

Elsever Sadigov

2/26/2019 13:14, Michael Mraka пишет:

Elsever Sadigov:

Hi, thanks for answers

So if I configure postfix, this will be enough?

Yes, it will.


Or anything else what I need to write to spacewalk configuration file?

--
Best Regards,

Elsever Sadigov

Regards,

--
Michael Mráka
System Management Engineering, Red Hat

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list



___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] Spacewalk Mail Configuration

[Elsever Sadigov]

Hi, thanks for answers

So if I configure postfix, this will be enough?

Or anything else what I need to write to spacewalk configuration file?

--
Best Regards,

Elsever Sadigov


2/25/2019 12:58, Michael Mraka пишет:

Ananda Arifianto:

Hi All,

Any clue about this?

Best Regards,
Ananda Arifianto

-Original Message-

Hello,

I wonder if somebody know how to configure spacewalk email notifications
work thru local mail server and not thru internet. Btw server is behind
http-proxy
There is not to much information or manual about it

Spacewalk sends emails throught local mail server (postfix).
If you need a special mail handling just reconfigure it in
/etc/postfix/main.cf.


--
Best Regards,

Elsever Sadigov

Regards,

--
Michael Mráka
System Management Engineering, Red Hat

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list



___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

[Spacewalk-list] Spacewalk Mail Configuration

[Elsever Sadigov]

Hello,

I wonder if somebody know how to configure spacewalk email notifications 
work thru local mail server and not thru internet. Btw server is behind 
http-proxy


There is not to much information or manual about it

--
Best Regards,

Elsever Sadigov


___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list