[2023.04] CVE 2023 22644

[cbosdo]

What does this PR change?

Port of commits mentioned in https://github.com/SUSE/spacewalk/issues/20419#issuecomment-1598857943

Links

Related https://github.com/SUSE/spacewalk/issues/21856

• DONE

Changelogs

Make sure the changelogs entries you are adding are compliant with https://github.com/uyuni-project/uyuni/wiki/Contributing#changelogs and https://github.com/uyuni-project/uyuni/wiki/Contributing#uyuni-projectuyuni-repository

If you don't need a changelog check, please mark this checkbox:

• No changelog needed

If you uncheck the checkbox after the PR is created, you will need to re-run changelog_test (see below)

Re-run a test

If you need to re-run a test, please mark the related checkbox, it will be unchecked automatically once it has re-run:

• Re-run test "changelog_test"
• Re-run test "backend_unittests_pgsql"
• Re-run test "java_pgsql_tests"
• Re-run test "schema_migration_test_pgsql"
• Re-run test "susemanager_unittests"
• Re-run test "javascript_lint"
• Re-run test "spacecmd_unittests"

[github-actions]

Suggested tests to cover this Pull Request

• srv_menu
• srv_check_channels_page
• srv_power_management_redfish
• srv_create_repository
• min_move_from_and_to_proxy
• srv_cobbler_buildiso
• srv_cobbler_sync
• srv_cobbler_profile
• srv_distro_cobbler
• minkvm_guests
• proxy_retail_pxeboot_and_mass_import
• min_retracted_patches
• srv_push_package
• proxy_as_pod_basic_tests
• srv_cobbler_distro
• srv_power_management
• min_timezone
• srv_virtual_host_manager
• allcli_update_activationkeys
• srv_check_sync_source_packages
• srv_handle_software_channels_with_ISS_v2
• min_salt_formulas
• srv_create_activationkey
• min_deblike_ssh
• min_ssh_tunnel
• srv_notifications
• minssh_salt_install_package
• srv_payg_ssh_connection
• min_change_software_channel
• srv_user_preferences
• min_monitoring
• srv_handle_config_channels_with_ISS_v2
• min_action_chain
• srv_delete_channel_from_ui
• allcli_reboot
• min_deblike_salt
• minssh_action_chain
• srv_content_lifecycle
• min_rhlike_remote_command
• min_salt_minion_details
• min_bootstrap_script
• sle_ssh_minion
• sle_minion
• allcli_overview_systems_details
• min_cve_id_new_syntax
• srv_delete_channel_with_tool
• min_rhlike_openscap_audit
• srv_monitoring
• min_rhlike_monitoring
• srv_group_union_intersection
• srv_scc_user_credentials
• allcli_action_chain
• min_bootstrap_reactivation
• min_salt_install_package
• srv_check_reposync
• min_check_patches_install
• min_deblike_salt_install_package
• proxy_cobbler_pxeboot
• min_rhlike_salt
• srv_salt_download_endpoint
• allcli_sanity
• srv_add_rocky8_repositories
• min_bootstrap_api
• srv_clone_channel_npn
• srv_reportdb
• min_rhlike_ssh
• buildhost_docker_build_image
• min_config_state_channel_subscriptions
• min_salt_openscap_audit
• proxy_register_as_minion_with_script
• min_bootstrap_ssh_key
• min_deblike_openscap_audit
• srv_restart
• allcli_software_channels
• min_salt_minions_page
• min_recurring_action
• min_salt_mgrcompat_state
• srv_advanced_search
• min_deblike_salt_install_with_staging
• srv_patches_page
• min_rhlike_salt_install_package_and_patch
• min_deblike_remote_command
• srv_disable_local_repos_off
• srv_channel_api
• min_project_lotus
• srv_channels_add
• srv_change_password
• srv_osimage
• srv_enable_sync_products
• min_activationkey
• srv_docker_cve_audit
• srv_sync_channels
• min_deblike_monitoring
• min_salt_user_states
• proxy_branch_network
• minssh_move_from_and_to_proxy
• srv_dist_channel_mapping
• buildhost_bootstrap
• srv_datepicker
• min_salt_formulas_advanced
• srv_user_configuration_salt_states
• srv_rename_hostname
• allcli_config_channel
• srv_change_task_schedule
• srv_first_settings
• min_salt_lock_packages
• min_salt_install_with_staging
• min_virthost
• min_bootstrap_negative
• minssh_bootstrap_api
• srv_organization_credentials
• srv_task_status_engine
• srv_activationkey_api
• srv_docker_advanced_content_management
• min_empty_system_profiles
• srv_logfile
• srv_mainpage
• min_config_state_channel
• allcli_system_group
• min_salt_pkgset_beacon
• min_docker_api
• srv_salt
• buildhost_osimage_build_image
• srv_maintenance_windows
• srv_manage_channels_page
• srv_users
• min_salt_software_states
• min_cve_audit
• srv_power_management_api
• buildhost_docker_auth_registry
• srv_sync_products
• allcli_software_channels_dependencies
• srv_docker
• min_config_state_channel_api
• minssh_ansible_control_node
• srv_menu_filter
• srv_custom_system_info
• srv_wait_for_reposync
• srv_manage_activationkey
• srv_user_api
• min_ansible_control_node
• min_custom_pkg_download_endpoint

[deneb-alpha]

the missing backport for https://github.com/SUSE/spacewalk/commit/b6f9a7b5d94f713d994f492b03cb91dfe2090777 (bsc#1210107) https://bugzilla.suse.com/show_bug.cgi?id=1210107 is in #7188