SUSE-SU-2023:2126-1

Description of the patch:

This update for cfengine, cfengine-masterfiles fixes the following issues:

Changes in cfengine:

• cfengine3.target: removed, replaced by upstream cfengine3.service
• In version 3.15.0, cfengine core split off libutils and libcompat directories as libntech. We include both together as we do not use or plan on using it outside of cfengine.

Changes since 3.7.3 are below, in reverse chronological order:

• Update to version 3.21.0: (jsc#SLE-24222, bsc#1197029, CVE-2021-44215)

  • Added cf-support utility for generating support information (ENT-9037)
  • Adjusted cf-check and package module code for empty updates list (ENT-9050)
  • '$(this.promiser)' can now be used in 'files' promise attributes 'if', 'ifvarclass' and 'unless' (CFE-2262, ENT-7008)
  • Fixed storage promise for nfs on MacOS (CFE-4093)
  • Fixed definition of _low_ldt class from cf-monitord (CFE-4022)
  • Insertion of contents of a file with blank lines into another file with blank lines no longer results in mixed content (ENT-8788)
  • Added suggestion to use a negative lookahead when non-convergent edits are attempted (CFE-192)
  • Unresolved function calls that return scalar values are now considered OK for constraints expecting strings during syntax check (CFE-4094)
  • cf-monitord now honors monitorfacility in body monitor control (ENT-4492)
  • cf-serverd now periodically reloads its policy if it contains unresolved variables (e.g. $(sys.policy_hub) in 'allowconnect'). (ENT-8456)
  • cf-serverd now starts in the network-online.target on systemd-based systems (ENT-8456)
  • edit_line bundles can now use the new $(edit.empty_before_use) variable mirroring the value of edit_defaults=>empty_before_use of the related files promise (ENT-5866)
  • Package modules with unresolved variables in their names are now skipped in package queries (ENT-9377)
  • Removed unsupported name_connect capability for udp_socket class...