SUSE-RU-2024:0823-1: Recommended update for google-cloud-sap-agent

Published Mar 8, 2024
·
Updated

This update for google-cloud-sap-agent contain the following fixes: Update to version 3.0 (bsc#1218736, bsc#1218737) Suppress packemaker command error to debug to avoid log flooding Expand load balancing cluster discovery. Log success messages in OTEs to STDOUT instead of STDERR used by log.Print Use bash always to avoid variation of behavior across OS/Shell types Minor updates to installbackint. Backint compose step properly saves metadata. Fix issue with discovery on ASCS instances. hanadiskrestore - fix the format of disktype string for disk create API Fix issue with PCS cluster address discovery. Update transform to insight Rename HANA backup/restore OTEs to reflect they are supported for all disks and not just persistent disk Increase the timeout for HDB stop to account for busy DBs Adding project sap-ecs-testing to the list. PD Restore - Support provisioned-iops and provisioned-throughput Integration test for configure OTE Added precondition in hana pd backup for stripped LVM Add a precondition check to verify user has passed a valid snapshot name that is present in the current project Update the usage to reflect additional required param Minor path update for supportbundle OTE. Fixing bug in slow moving metrics partial collection scenarios Adding check for agent status after restart. Ensure Backint ComposeChunks has a valid bucket handle Discover whether a Netweaver instance is ABAP or Java Replace standard slices package with third party version WLM HANA metric hainsamezone now reports instance names for HA nodes in the same zone Fix data race condition for Backint Backup with new client connections Make -new-disk-name a required parameter to avoid the 63 char limit in the name length due to auto-generated names Fix command for collecting Corosync metric twonoderuntime Make snapshot name similar to disk name Bump golang.org/x/crypto from 0.15.0 to 0.17.0 Enable Discovery config flag controls submission to Data Warehouse and Cloud Logging Create new clients for each operation in Backint Add clientendpoint to Backint proto. Getting the build number into the version for display Backint config name change: serviceaccount to serviceaccountkey Add HANA HA metrics to collection definition. Fix sorting bug in a diff in appsdiscoverytest.go Add discoverHANATenantDBs to main code path Change PIPE filemode to WRONLY to allow us to detect broken pipes Deprecate sapsystemdiscovery config field in favor of enablediscovery Move the validation of whether user passed correct PD, before stopping HANA Add a placeholder for public doc link with next steps after hanapdrestore workflow has completed Fix executable path for HDB version command Add optional param new-disk-name to hanapdrestore for users that wish to override the default Sort the skipmetrics in unit test to avoid order related flakes Generalizing configure OTE Discover Netweaver kernel version Fix Sprintf call Use SAP System data to determine if HANA HA nodes share the same zone. hanapdrestore - do not delete PDs in case of failures Create discoverHANATenantDBs method to support multiple SIDs for HANA tenant DBs Send additional fields in Data Warehouse WriteInsightRequest Updating the username parameters for hana pd backup and restore Retrieve Reliability data every 2 hours instead of 24 Discover HANA version Fix import for GitHub build Add instance properties, and topology information to system data Keep the device nam and disk name same after restore Move sapdiscovery package into system package Changer the default name of the disk created by restore workflow Updates the generated protobuf go for system.proto Update generated system proto Update go.yml Add topology and instance properties info to SAP System data Add a check to verify the disk is attached to instance, fail if disk is not attached Add application and database software properties to system representation Fix race condition in heartbeat test case Add error handling to restore workflow to try and keep the HANA system in a clean state on failures Enable LogToCloud by default for both OTE and Daemon modes Bump Agent version to 3.0 Reliability OTE added to SAP Agent Declare public Get interface for SAP System discovery data Integration testing for Networkstats Package Adding project sap-ecs-testing to the list Adding one time execution for enabling/disabling of features Change to using custom retries for initial bucket connection Default collection definition to be fetched from GCS Add a 2 minute context timeout for initial bucket connection Add collectionconfigversion as a WLM system metric Make project, host param optional for hanapdbackup, in addition make user param optional for hanapdrestore Fix potential nil dereference WLM metrics collection Add force-stop-hana to restore workflow to forcefully stop HANA when the param is passed Rename the HANA PD snapshot and restore workflows Add unit tests for GetProvisionIOps and GetProvisionedThoughput Remove the TestCollect unit test which relies on nc command which can be flaky in unit tests Increase Backint timeout for PIPE files to 3 minutes Add XFS freeze and unfreeze to PD based snapshot

Affected Software

10 affected componentsFixes available
All of the following
SUSE openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)
suse/google-cloud-sap-agent<3.0-150100.3.23.1
3.0-150100.3.23.1
All of the following
SUSE Public Cloud Module 15-SP2 (aarch64 ppc64le s390x x86_64)
suse/google-cloud-sap-agent<3.0-150100.3.23.1
3.0-150100.3.23.1
All of the following
SUSE Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64)
suse/google-cloud-sap-agent<3.0-150100.3.23.1
3.0-150100.3.23.1
All of the following
SUSE Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64)
suse/google-cloud-sap-agent<3.0-150100.3.23.1
3.0-150100.3.23.1
All of the following
SUSE Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64)
suse/google-cloud-sap-agent<3.0-150100.3.23.1
3.0-150100.3.23.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade suse/google-cloud-sap-agent to a version that resolves this vulnerability.

    Fixed in 3.0-150100.3.23.1
  2. Upgrade

    Upgrade google-cloud-sap-agent to a version that resolves this vulnerability.

    Fixed in 3.0
  3. Upgrade

    Upgrade golang.org/x/crypto to a version that resolves this vulnerability.

    Fixed in 0.17.0
  4. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Public-Cloud-15-SP2-2024-823=1
  5. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Public-Cloud-15-SP3-2024-823=1
  6. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-823=1
  7. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-823=1
  8. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch openSUSE-SLE-15.5-2024-823=1
  9. Configuration

    Rename the Backint configuration field from service_account to service_account_key.

    Backint service_account = service_account_key
  10. Configuration

    Replace the deprecated sap_system_discovery configuration field with enable_discovery.

    SAP system discovery enable_discovery = use instead of sap_system_discovery

Event History

Mar 8, 2024
Advisory Published
via SUSE·04:30 PM

Frequently Asked Questions

1

Which environments should be reviewed for this update?

Review deployments using google-cloud-sap-agent on openSUSE Leap 15.5 or SUSE Public Cloud Module 15-SP2, 15-SP3, 15-SP4, or 15-SP5. The advisory lists aarch64, ppc64le, s390x, and x86_64 architectures for these products.

2

What release does the update provide?

The update moves google-cloud-sap-agent to version 3.0. It includes fixes affecting cluster discovery, backup and restore operations, command logging, shell behavior, and related SAP-agent functionality.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203