Cobbler

Cobbler [3.3.4](https://github.com/cobbler/cobbler/tree/v3.3.4) - 2024-02-26

This release is containing a lot of backports from `main` to make Cobbler more stable for the community.

We have 99 files changed, 5816 insertions(+), 920 deletions(-)

Milestone: <https://github.com/cobbler/cobbler/milestone/21>

Diff to last release: [`v3.3.3...v3.3.4`](https://github.com/cobbler/cobbler/compare/v3.3.3...v3.3.4)

Added

- SPEC: Add "cobbler-tests-containers" subpackage
[3368](https://github.com/cobbler/cobbler/issues/3368)
- Tests: Add integration tests for "cobbler-settings"
[3382](https://github.com/cobbler/cobbler/issues/3382)
- SPEC: Add support for Cobbler running on Ubuntu 22.04
[3413](https://github.com/cobbler/cobbler/issues/3413)
- Add build of debs for Debian 12 Bookworm
[3566](https://github.com/cobbler/cobbler/issues/3566)
- Add various openSUSE, SLES and SLE Micro signatures
[3589](https://github.com/cobbler/cobbler/issues/3589)
- Settings: Added settings migration for Cobbler 3.3.4
[3592](https://github.com/cobbler/cobbler/issues/3592)


Changed

- Distros: Enhance error message when a kernel doesn't match our regex
requirements [3194](https://github.com/cobbler/cobbler/issues/3194)
- CI: Use Fedora Rawhide for tests to stabalize reposync tests
[3468](https://github.com/cobbler/cobbler/issues/3468)


Fixed

- XML-RPC API: Systems - Re-enable the modify_interface call
[2896](https://github.com/cobbler/cobbler/issues/2896)
- XML-RPC API: Fix an issue where "get_item_resolved_value()" would return
unserializable types [3173](https://github.com/cobbler/cobbler/issues/3173)
- "grab_tree" is not spamming the logfile anymore
[3176](https://github.com/cobbler/cobbler/issues/3176)
- Systems: Don't create interface "default" when not needed
[3190](https://github.com/cobbler/cobbler/issues/3190)
- Buildiso: The action doesn't fail anymore if a system is based on an image
[3238](https://github.com/cobbler/cobbler/issues/3238)
- DHCP: The main config file doesn't contain "<<inherit>>" anymore for the
filename option [3367](https://github.com/cobbler/cobbler/issues/3367)
- Anamon: Fix uploading of logfiles from the installer
[3420](https://github.com/cobbler/cobbler/issues/3420)
- SELinux: Fix daemon startup error caused by incorrect ownership of
/var/lib/cobbler/web.ss
[3446](https://github.com/cobbler/cobbler/issues/3446)
- CLI: Fixed an error that mangled the types of certain flags for Cobbler items
[3450](https://github.com/cobbler/cobbler/issues/3450)
- Docs: The documentation builds with Sphinx 7.x now
[3455](https://github.com/cobbler/cobbler/issues/3455)
- Windows Support: Fixed issues that prevented Windows from being able to be
installed [3473](https://github.com/cobbler/cobbler/issues/3473)
- Re-Added "tree" variable to "autoinstall_meta"
[3498](https://github.com/cobbler/cobbler/issues/3498)
- Add EFI chainloader for Ubuntu to menu local
[3524](https://github.com/cobbler/cobbler/issues/3524)
- Fix path to linux.c32 for symlink in mkloaders
[3580](https://github.com/cobbler/cobbler/issues/3580)
- SPEC: Add guard for Fedora to ensure that an incorrect /etc/os-release
doesn't fail the build
[3584](https://github.com/cobbler/cobbler/issues/3584)
- sync: Fix KeyError with enabled DNS management due to missing context in the
template lookup mapping data structure
[3588](https://github.com/cobbler/cobbler/issues/3588)
- scm_track: Fix error that commits didn't work due to pathspec errors
[3591](https://github.com/cobbler/cobbler/issues/3591)
- Fixed infinite recursion of bash completion
[3604](https://github.com/cobbler/cobbler/issues/3604)
- Removed from Python 3.12 SafeConfigParser replaced with ConfigParser
[3606](https://github.com/cobbler/cobbler/issues/3606)
- Settings: Clarify leftover settings and group them according to their
respective topics [3612](https://github.com/cobbler/cobbler/issues/3612)
- scm_track: Pushing to remote repositories via the "scm_push_script" settings
works again [3621](https://github.com/cobbler/cobbler/issues/3621)
- mkloaders: The default name for grub2-efi changed to grubx64.efi to match the
expected name in the DHCPv4 template.
[3623](https://github.com/cobbler/cobbler/issues/3623)

This release is containing a lot of backports from `main` to make Cobbler ready to be shipped in Uyuni.

We have 129 files changed, 6254 insertions(+), 1877 deletions(-)

Milestone: https://github.com/cobbler/cobbler/milestone/19

Diff to last release: https://github.com/cobbler/cobbler/compare/v3.3.2...v3.3.3

**Announcements**:

- None

**New**:

- Uyuni Proxies can now be set with the schema validation. 3061
- Cobbler should now build on AlmaLinux. 3064
- The initrd is not required anymore as it is an optional file. 3127
- XML-RPC: Added `dump_vars` endpoint. This is intended to replace `get_blended_data` as of 3.4.0. 3131
- XML-RPC: Added `get_item_resolved_value` (3056) & `set_item_resolved_value` (3134) endpoints.

**Breaking Changes**:

- The field `virt_file_size` is now a float and the related settings as well. 3072

**Changes**:

- The error messages for duplicated objects now contains the name of the duplicated object. 3129

**Bugfixes**:

- Dictionaries had the wrong value set for `<<inherit>>` 3128
- There were some cases in which the autoinstallation manager was handed the wrong object and then crashed. 3130
- The inheritance of the `owners` field was fixed. 3131
- Serial Console options should not contain bogous `-1` value anymore. 3105
- HTTP API should not throw permission errors anymore. 3046 3080
- During build the log was not visible due to a custom logger without output. 3059
- `cobbler mkloaders` now also copies dependencies of `menu.c32`. 3058
- We now generate the grub configuration for the architectures correct again. 3097
- `virt_file_size` now is a float at all times. 3072
- Cobbler should restart successfully now if you have attached an image to a system. 3044
- If you have a system named `default` the bootloader was not removed properly before. 3045
- `cobbler buildiso`: The `isolinux.cfg` was not properly formatted. 3047
- There were unharmful templating errors in the log related to `redhat_management_type`. The parts depending on this were removed. 3048
- The DNS managers were non-functional before because of a not existing function call. 3049
- `cobbler buildiso` failed with `--tmpdir`s that don't end in `buildiso`. 3050
- `cobbler buildiso` had outdated docs and help messages for some parameters. 3051
- `cobbler import`: It was impossible to import Rocky Linux 8.5 successfully. 3052
- Cobbler created duplicated settings files before. 3053
- `cobbler sync` was broken by refactoring to `shell=False` before. 3054

**Other**:

- CI: The system-test workflow now uses a prebuilt image. 3132

This release addresses mainly security issues and bugfixes.

We have 156 files changed, 3288 insertions(+), 1642 deletions(-)

Milestone: <https://github.com/cobbler/cobbler/milestone/18>

Diff to last release: <https://github.com/cobbler/cobbler/compare/v3.3.1...v3.3.2>

**Announcements**:

- Important Security Bugfixes
- CVE-2022-0860: See [GH advisory](https://github.com/cobbler/cobbler/security/advisories/GHSA-mcg6-h362-cmq5)

**New**:

- `cobbler sync` doesn't have to be executed no more after `enable_ipxe` was flipped [2689](https://github.com/cobbler/cobbler/issues/2689) [#2944](https://github.com/cobbler/cobbler/pull/2944)
- Auth: Support for Global Secure Catalog via LDAP provider [2937](https://github.com/cobbler/cobbler/pull/2937)

**Breaking Changes**:

- None

**Changes**:

- Reposync now deletes old metadata to prevent metadata merge conflicts [2942](https://github.com/cobbler/cobbler/pull/2942)
- The automigration of the settings is now not enabled per default. [2881](https://github.com/cobbler/cobbler/issues/2881) [#2966](https://github.com/cobbler/cobbler/pull/2966)
- We removed `ppc` from RedHat EL 7 as it is not supported [2964](https://github.com/cobbler/cobbler/pull/2964)

**Bugfixes**:

- `Network interface is not subscriptable` errors were fixed [2856](https://github.com/cobbler/cobbler/issues/2856)
- The stacktraces related to the package and file pre & post triggers should no longer appear [2953](https://github.com/cobbler/cobbler/pull/2953)
- You should be able to add multiple initrds if needed again [2870](https://github.com/cobbler/cobbler/issues/2870) [#2931](https://github.com/cobbler/cobbler/pull/2931)
- Debian: Fix regex for `SHIM_FILE` which now provides a working reasonable default [2930](https://github.com/cobbler/cobbler/pull/2930)

**Other**:

- Internal Refactorings:
- Tech-Tebt in the DHCP ISC manager was cleaned up [2957](https://github.com/cobbler/cobbler/pull/2957)
- Switch from the collection manager to the `api.py` [2955](https://github.com/cobbler/cobbler/pull/2955)
- Docs
- `cobbler-settings` is now explained in the "Scripts" section [2966](https://github.com/cobbler/cobbler/pull/2966)
- Tests:
- Added basic tests for untested modules [2956](https://github.com/cobbler/cobbler/pull/2956)
- Python: Switch from XML-RPC to Python objects [2963](https://github.com/cobbler/cobbler/pull/2963)
- CI/container:
- Increase timout for DEB build [2954](https://github.com/cobbler/cobbler/pull/2954)
- CI: Add podman support [2934](https://github.com/cobbler/cobbler/pull/2934)
- Debian packages build on PRs again [2950](https://github.com/cobbler/cobbler/pull/2950)
- Debian package build errors were fixed [2948](https://github.com/cobbler/cobbler/pull/2948) [#2949](https://github.com/cobbler/cobbler/pull/2949)

This release addresses mainly security issues and bugfixes.

We have 212 files changed, 2665 insertions(+), 125148 deletions(-)

Milestone: <https://github.com/cobbler/cobbler/milestone/15>

Diff to last release: <https://github.com/cobbler/cobbler/compare/v3.3.0...v3.3.1>

**Announcements**:

- Important Security Bugfixes
- CVE-2021-45082: Incomplete template sanitation [2945](https://github.com/cobbler/cobbler/pull/2945)
- CVE-2021-45083: Make configuration files only readable by root [2945](https://github.com/cobbler/cobbler/pull/2945)
- Stabilize MongoDB serializer [2919](https://github.com/cobbler/cobbler/pull/2919)
- Log file pollution: validate the data before logging it [2911](https://github.com/cobbler/cobbler/pull/2911)
- Authentication: Remove testing module due to hardcoded well known
credentials [2908](https://github.com/cobbler/cobbler/pull/2908)

**New**:

- Support for Windows 11 [2819](https://github.com/cobbler/cobbler/pull/2819)
- Support for FreeBSD 12.2 & 13.0 [2929](https://github.com/cobbler/cobbler/pull/2929)
- UEFI support [2416](https://github.com/cobbler/cobbler/pull/2416)

**Breaking Changes**:

- `cobbler mkgrub` renamed to `cobbler mkloaders` [2807](https://github.com/cobbler/cobbler/pull/2807)

**Bugfixes**:

- `cobbler <item> rename` should work again now [2824](https://github.com/cobbler/cobbler/pull/2824)
- ldap_anonymous_bind [2831](https://github.com/cobbler/cobbler/pull/2831)
- Wrong bind path for Debian [2927](https://github.com/cobbler/cobbler/pull/2927)
- RHEL/Fedora arches in signatures [2895](https://github.com/cobbler/cobbler/pull/2895)
- Auto migrate settings [2871](https://github.com/cobbler/cobbler/pull/2871)
- System: Fix serial_device and serial_baud_rate [2923](https://github.com/cobbler/cobbler/pull/2923)
- Cannot set property 'file' of image [2878](https://github.com/cobbler/cobbler/pull/2878)
- Enums: Fix failure to convert `<<inherit>>` [2920](https://github.com/cobbler/cobbler/pull/2920)
- `cobbler mkloaders` for non-SUSE distros did not work [2851](https://github.com/cobbler/cobbler/pull/2851)
- Added `ipv6_prefix` to `post_install_network_config` [2928](https://github.com/cobbler/cobbler/pull/2928)

**Other**:

- Internal Refactorings:
- Add systemctl for systemd based systems [2841](https://github.com/cobbler/cobbler/pull/2841)
- Enums: Create general str to enum converter [2901](https://github.com/cobbler/cobbler/pull/2901)
- Systems: Re-enable the modify_interface call [2921](https://github.com/cobbler/cobbler/pull/2921)
- Utils: Check if service is running before stopping it [2936](https://github.com/cobbler/cobbler/pull/2936)
- Several check enhancements [2809](https://github.com/cobbler/cobbler/pull/2809)
- Remove old Cobbler Web leftovers [2938](https://github.com/cobbler/cobbler/pull/2938)
- Simplify remote_boot_file setters [2886](https://github.com/cobbler/cobbler/pull/2886)

- Docs
- Explain TFTP and internal database [2904](https://github.com/cobbler/cobbler/pull/2904)
- Tests:
- Add tftpgen unit tests [2808](https://github.com/cobbler/cobbler/pull/2808)
- Add system unit tests [2814](https://github.com/cobbler/cobbler/pull/2814)
- Add system test for `cobbler buildiso` [2822](https://github.com/cobbler/cobbler/pull/2822)
- XMLRPC test for adding an interface to a system [2907](https://github.com/cobbler/cobbler/pull/2907)
- CI/container:
- Improvements for the development container [2806](https://github.com/cobbler/cobbler/pull/2806)
- Use prebuilt images for testing [2812](https://github.com/cobbler/cobbler/pull/2812)
- CentOS to Rocky Linux move for Compose [2939](https://github.com/cobbler/cobbler/pull/2939)
- Add python-rpm-macros [2872](https://github.com/cobbler/cobbler/pull/2872)

This release got everything! Security, Features, Bugfixes, ...

We have 422 files changed, 25375 insertions(+), 34826 deletions(-)

Milestone: <https://github.com/cobbler/cobbler/milestone/10>

Diff to last release: <https://github.com/cobbler/cobbler/compare/v3.2.1...v3.3.0>

**Known Issues**:

- `cobbler <item> rename` is not working currently
- `cobbler <item> edit` may have bugs due to the internal refactorings

**Breaking Changes**:

- The webinterface got removed [2434](https://github.com/cobbler/cobbler/pull/2434) [#2434](https://github.com/cobbler/cobbler/issues/2286) [#2700](https://github.com/cobbler/cobbler/pull/2700)
- Please use the CLI in the meantime
- A new webinterface is under development at <https://github.com/cobbler/cobbler-web>
- The core code has priority at any time. There are third party tools available which provide a webinterface and use
Cobbler as a backend. A list of those tools can be found at the bottom of the following page: <https://cobbler.github.io/users.html>
- The Cobbler internal TFTP Demon got removed [2512](https://github.com/cobbler/cobbler/pull/2512)
- `yaboot` support got removed as a bootloader for PowerPC [2723](https://github.com/cobbler/cobbler/pull/2723)

**Announcements**:

- Important Security Bugfixes [2794](https://github.com/cobbler/cobbler/pull/2794) [#2795](https://github.com/cobbler/cobbler/issues/2795)
- Arbitrary Read was possible through `generate_script()`
- Arbitrary Write was possible through `upload_log_data()`
- Log poisoning with Remote-Code-Execution was possible through any XMLRPC method which logs to the logfile.
- There was an internal refactoring from runtime created Python attributes to Python Properties. This allows much
better data validation and thus better error handling but also introduced new bugs.
Related: [2433](https://github.com/cobbler/cobbler/pull/2433) [#2666](https://github.com/cobbler/cobbler/pull/2666) [#2677](https://github.com/cobbler/cobbler/pull/2677) [#2753](https://github.com/cobbler/cobbler/pull/2753) [#2699](https://github.com/cobbler/cobbler/issues/2699) [#2692](https://github.com/cobbler/cobbler/issues/2692) [#2684](https://github.com/cobbler/cobbler/pull/2684) [#2707](https://github.com/cobbler/cobbler/issues/2707) [2727](https://github.com/cobbler/cobbler/pull/2727) [#2726](https://github.com/cobbler/cobbler/pull/2726) [#2685](https://github.com/cobbler/cobbler/pull/2685) [#2675](https://github.com/cobbler/cobbler/issues/2675) [#2678](https://github.com/cobbler/cobbler/issues/2678) [#2682](https://github.com/cobbler/cobbler/pull/2682) [#2674](https://github.com/cobbler/cobbler/issues/2674) [#2676](https://github.com/cobbler/cobbler/pull/2676) [#2681](https://github.com/cobbler/cobbler/issues/2681) [#2683](https://github.com/cobbler/cobbler/pull/2683) [#2696](https://github.com/cobbler/cobbler/pull/2696) [#2702](https://github.com/cobbler/cobbler/pull/2702) [#2732](https://github.com/cobbler/cobbler/issues/2732) [#2733](https://github.com/cobbler/cobbler/pull/2733) [#2722](https://github.com/cobbler/cobbler/issues/2722) [#2680](https://github.com/cobbler/cobbler/issues/2680) [#2711](https://github.com/cobbler/cobbler/pull/2711)
- This is the first release with the new avatar [2604](https://github.com/cobbler/cobbler/issues/2604)

**New**:

- The `migrate-data-v2-to-v3.py` script is now packages and can directly be used [2591](https://github.com/cobbler/cobbler/pull/2591)
- The `mkgrub.sh` script was converted to the command `cobbler mkgrub` [2739](https://github.com/cobbler/cobbler/pull/2739) [#2721](https://github.com/cobbler/cobbler/issues/2721)
- We now have automigrations and validation for the application settings [2747](https://github.com/cobbler/cobbler/pull/2747) [#2719](https://github.com/cobbler/cobbler/issues/2719) [#2772](https://github.com/cobbler/cobbler/pull/2772) [#2769](https://github.com/cobbler/cobbler/pull/2769)
- New distros are now able to be imported:
- Debian 11 [2758](https://github.com/cobbler/cobbler/pull/2758)
- Fedora 34 [2713](https://github.com/cobbler/cobbler/pull/2713)
- `cobbler sync` now supports syncing only specified systems [2601](https://github.com/cobbler/cobbler/pull/2601)
- You can now define your own boot menu structure [2575](https://github.com/cobbler/cobbler/pull/2575)
- Cobbler is able to run on RockyLinux and import it [2627](https://github.com/cobbler/cobbler/pull/2627)
- DHCPv6 is now natively supported [2539](https://github.com/cobbler/cobbler/pull/2539) [#2511](https://github.com/cobbler/cobbler/issues/2511) [#2647](https://github.com/cobbler/cobbler/pull/2647)

**Changes**:

- Internal cache got fully removed with 2684 (related [2661](https://github.com/cobbler/cobbler/pull/2661))
- `cobbler get-loaders` was removed for security reasons [2572](https://github.com/cobbler/cobbler/pull/2572)
- Removed the `simplejson` dependency as it is redundant now [2572](https://github.com/cobbler/cobbler/pull/2602)
- Docs: Multiple enhancements [2599](https://github.com/cobbler/cobbler/pull/2599) [#2788](https://github.com/cobbler/cobbler/pull/2788)
- Logger: Changed to the default Python 3 logger (much more configurable) [2573](https://github.com/cobbler/cobbler/pull/2573)
- Old bootloaders which were not shipped by default got removed [2641](https://github.com/cobbler/cobbler/pull/2641)
- Windows autoinstallation was simplified [2767](https://github.com/cobbler/cobbler/pull/2767)
- We are now using `os.urandom` instead of `/dev/urandom` [2752](https://github.com/cobbler/cobbler/pull/2752)
- We have reduced the usage of the generic `CX` exception [2643](https://github.com/cobbler/cobbler/pull/2643)
- `ipmilanplus` is the default fence agent for power operations [2714](https://github.com/cobbler/cobbler/pull/2714)
- For nested GRUB menus we now show an indicator [2693](https://github.com/cobbler/cobbler/pull/2694) [#2693](https://github.com/cobbler/cobbler/issues/2693)
- Items can now be found even if the item type is not specified [2663](https://github.com/cobbler/cobbler/pull/2663)

**Bugfixes**:

- Be compliant with CORS pre-flight requests [2594](https://github.com/cobbler/cobbler/pull/2594)
- `cobbler reposync`: SSL related problems were fixed [2759](https://github.com/cobbler/cobbler/pull/2759)
- Autoinstall templates directory was wrong per default. [2590](https://github.com/cobbler/cobbler/pull/2590)
- We do not strip the last two characters anymore when rendering via an HTTP(S) Endpoint [2626](https://github.com/cobbler/cobbler/pull/2626)
- `cobbler check` does not complain about the old name of the settingsfile anymore [2630](https://github.com/cobbler/cobbler/pull/2630)
- openSUSE Tumbleweed AutoYAST templating was fixed again [2629](https://github.com/cobbler/cobbler/pull/2629) [#2628](https://github.com/cobbler/cobbler/issues/2628) [#2632](https://github.com/cobbler/cobbler/pull/2632)
- `cobbler hardlink` now works with non default web directories [2774](https://github.com/cobbler/cobbler/pull/2774)
- GRUB got a few Cobbler related fixes [2653](https://github.com/cobbler/cobbler/pull/2653) [#2792](https://github.com/cobbler/cobbler/pull/2792) [#2743](https://github.com/cobbler/cobbler/pull/2743)
- `pxe_just_once` is working as expected now [2783](https://github.com/cobbler/cobbler/issues/2783) [#2784](https://github.com/cobbler/cobbler/pull/2784)
- Anaconda installation process `ONBOOT` is now able to be set with and without qotation marks [2775](https://github.com/cobbler/cobbler/pull/2775)
- The Autoinstall Manager crashes correctly in case of an error [2791](https://github.com/cobbler/cobbler/pull/2791)
- `cobbler distro delete` now doesn't leave repository configs behind [2729](https://github.com/cobbler/cobbler/pull/2729) [#1370](https://github.com/cobbler/cobbler/issues/1370)
- `cobbler sync --dns` is now working as expected again [2710](https://github.com/cobbler/cobbler/issues/2710) [#2712](https://github.com/cobbler/cobbler/pull/2712)

**Other**:

- Internal Refactorings:
- Base class for all manager modules is used now [2610](https://github.com/cobbler/cobbler/pull/2610)
- Cobbler litesync was moved into Cobbler sync [2615](https://github.com/cobbler/cobbler/pull/2615)
- `field_info.py` functionality was removed since it was unused [2662](https://github.com/cobbler/cobbler/pull/2662)
- API is used instead of the collection manager [2652](https://github.com/cobbler/cobbler/pull/2652)
- Settings are now held in the API instead of the collection manager [2664](https://github.com/cobbler/cobbler/pull/2664)
- Directly use the UUID module where available [2650](https://github.com/cobbler/cobbler/pull/2650)
- Don't clone an object during rename [2744](https://github.com/cobbler/cobbler/pull/2744)
- `kopts_overwrite` is more error resistent now [2651](https://github.com/cobbler/cobbler/pull/2651)
- Docs:
- Added missing dependency for building [2571](https://github.com/cobbler/cobbler/pull/2571)
- Fix build errors [2633](https://github.com/cobbler/cobbler/pull/2633)
- Extend `__init__.py` files with content about Python modules [2642](https://github.com/cobbler/cobbler/pull/2642)
- Spelling [2731](https://github.com/cobbler/cobbler/pull/2731)
- Types for many external API methods [2785](https://github.com/cobbler/cobbler/pull/2785)
- Document properties [2773](https://github.com/cobbler/cobbler/pull/2773)
- General cleanup [2771](https://github.com/cobbler/cobbler/pull/2771)
- Tests: Multiple new testcases to improve stability and coverage [2656](https://github.com/cobbler/cobbler/pull/2656) [#2740](https://github.com/cobbler/cobbler/pull/2740) [#2745](https://github.com/cobbler/cobbler/pull/2745) [#1492](https://github.com/cobbler/cobbler/issues/1492) [#2645](https://github.com/cobbler/cobbler/pull/2645) [#2649](https://github.com/cobbler/cobbler/pull/2649)
- GitHub Issue templates were revamped [2578](https://github.com/cobbler/cobbler/pull/2578)
- Packaging: Specfile got a few improvements [2780](https://github.com/cobbler/cobbler/pull/2780)
- CI:
- Obsolete testing container [2730](https://github.com/cobbler/cobbler/pull/2730)
- Also use the openSUSE Build Service for packaging on PRs [2672](https://github.com/cobbler/cobbler/pull/2672)
- Package also for openSUSE [2607](https://github.com/cobbler/cobbler/pull/2607)
- Enhance the Setup scrips [2331](https://github.com/cobbler/cobbler/pull/2631)
- Development: Container now exposes 80 & 443 [2609](https://github.com/cobbler/cobbler/pull/2609)

This is a security only release.

> The Django webinterface is removed with V3.3.0 but is included in V3.2.2!

We have

Milestone: <https://github.com/cobbler/cobbler/milestone/17>

Diff to last release: <https://github.com/cobbler/cobbler/compare/v3.2.1...v3.2.2>

**Breaking Changes**: None

**Announcements**:

- Important Security Bugfixes [2797](https://github.com/cobbler/cobbler/pull/2797)
- Arbitrary Read was possible through `generate_script()`
- Arbitrary Write was possible through `upload_log_data()`
- Log poisoning with Remote-Code-Execution was possible through any XMLRPC method which logs to the logfile.

**New**:

- AlmaLinux & RockyLinux are now supported [2705](https://github.com/cobbler/cobbler/pull/2705)

**Changes**: None

**Bugfixes**: None

**Other**:

- Release preparations [2798](https://github.com/cobbler/cobbler/pull/2798)