{"affected":[{"ecosystem_specific":{"binaries":[{"warewulf4":"4.6.4-bp160.1.1","warewulf4-dracut":"4.6.4-bp160.1.1","warewulf4-man":"4.6.4-bp160.1.1","warewulf4-overlay":"4.6.4-bp160.1.1","warewulf4-overlay-rke2":"4.6.4-bp160.1.1","warewulf4-overlay-slurm":"4.6.4-bp160.1.1","warewulf4-reference-doc":"4.6.4-bp160.1.1"}]},"package":{"ecosystem":"openSUSE:Leap 16.0","name":"warewulf4","purl":"pkg:rpm/opensuse/warewulf4&distro=openSUSE%20Leap%2016.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.6.4-bp160.1.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for warewulf4 fixes the following issues:\n\nChanges in warewulf4:\n\n- Update to version 4.6.4:\n  * v4.6.4 release updates\n  * Convert disk booleans from wwbool to *bool which allows bools in\n    disk to be set to false via command line (bsc#1248768)\n  * Update NetworkManager Overlay\n    * Disable ipv4 in NetworkManager if no address or route is specified\n  * fix(wwctl): Create overlay edit tempfile in tmpdir\n  * Add default for systemd name for warewulf in warewulf.conf\n  * Atomic overlay file application in wwclient\n  * Simpler names for overlay methods\n  * Fix warewulfd api behavior when deleting distribution overlay\n\n- Update to version 4.6.3:\n  * v4.6.3 release\n  * IPv6 iPXE support\n  * Fix a syntax error in the RPM specfile\n  * Fix a race condition in wwctl overlay edit\n  * Fixed handling of comma-separated mount options in `fstab` and `ignition` overlays\n  * Move reexec.Init() to beginning of wwctl\n  * Add documentation for using tmpfs to distribute across numa nodes\n  * added warewuld configure option\n  * Fix wwctl upgrade nodes to handle kernel argument lists (bsc#1227686 bsc#1227465)\n  * Address copilot review from #1945\n  * Refactor wwapi tests for proper isolation\n  * Bugfix: cloning a site overlay when parent dir does not exist\n  * Clone to a site overlay when adding files in wwapi\n  * Consolidated createOverlayFile and updateOverlayFile to addOverlayFile\n  * Support for creating and updating overlay file in wwapi\n  * Only return overlay files that refer to a path within the overlay\n  * add overlay file deletion support\n  * DELETE /api/overlays/{id}?force=true can delete overlays in use\n  * Restore idempotency of PUT /api/nodes/{id}\n  * Simplify overlay mtime api and add tests\n  * add node overlay buildtime\n  * Improved netplan support\n  * Rebuild overlays for discovered nodes\n  * Restrict userdocs from building during pr when not modified\n  * Update to v4.6.2 GitHub release notes\n","id":"openSUSE-SU-2025-20031-1","modified":"2025-10-27T09:58:12Z","published":"2025-10-27T09:58:12Z","references":[{"type":"ADVISORY","url":null},{"type":"REPORT","url":"https://bugzilla.suse.com/1227465"},{"type":"REPORT","url":"https://bugzilla.suse.com/1227686"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246082"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248768"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248906"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-58058"}],"related":["CVE-2025-58058"],"summary":"Security update for warewulf4","upstream":["CVE-2025-58058"]}