RHBA-2015:1703 - Bug Fix Advisory

Topic

Ceph Storage: ceph-radosgw and librbd package bug-fix update

Description

The ceph-radosgw packages provide an S3 HTTP Representational State
Transfer (REST) gateway for the RADOS object store.

This update fixes the following bugs:

• Modifying a user's Access Control List (ACL) permissions for an object in

the RADOS gateway (RGW) inappropriately caused the user to become the owner
of the object. The underlying code has been fixed, and this problem no
longer occurs. (rhbz#1214051)

• Recreating a previously existing node in RGW previously did not remove

the node instance metadata object and thus created a redundant object in
the RGW pool. This update addresses this problem, and redundant objects are
no longer generated in the described scenario. (rhbz#1212524)

• librbd AIO calls may block under certain conditions (unreachable OSDs, QoS throttling, etc). In the case of QEMU with RBD disk images, this could have the negative effect of stalling the guest VM CPU -- potentially resulting in CPU soft lockup warnings from the guest OS. (rhbz#1231969)
• The qemu-kvm-rhev package on RHEL 6 does not have native librbd support.

qemu-kvm-rhev users on RHEL 6 are unable to load images from RBD. (rhbz#1234516)

• rgw: object set attrs clobbers object removal bucket index update (rhbz#1206963):

Racing changes to object attributes and object removal might end up with extra entry in the bucket index

• rgw: setting bucket attributes (swift POST on bucket) sometimes fail (rhbz#1214058):

Setting bucket attributes might fail occasionally

• rgw: change multipart upload id magic (rhbz#1183182):

Some clients are not compatible with the multipart upload id string, so multipart uploads via these clients failed.

• rgw: request for object over 512K using range header fails when using swift api (rhbz#1214854):

Download of objects that are larger than 512k while using the Range HTTP header through swift was failing.

• rgw: broken multipart upload when resending parts (rhbz#1222091)

When resending parts, the manifest created in a multipart upload is broken.

• rgw: keystone token cache does not work correctly (rhbz#1213999)

Keystone cache token was not working correctly.

• rgw: segfault when copying an object (rhbz#1214061)

In some cases, copying object may end up with radosgw crash.

• rgw: When using the fcgi frontend, certain swift API requests don't return with the expected content length HTTP header. (rhbz#1213988)
• librbd: cinder-volume keeps opening Ceph clients until the maximum number of opened files reached (rhbz#1220496):

With the admin socket enabled, cinder or nova could reach the limit on
opened files due to leaking the admin socket during periodic storage capacity checks.

• librbd: re-establish watches when increasing pgs (rhbz#1245785):

When increasing the number of pgs in a pool with active rbd images,
resizes and snapshots would silently fail to apply to in-use images until the image was reopened, e.g. by reattaching it to a VM.

Users of ceph-radosgw and librbd are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64

Fixes

• BZ - 1183182 - RadosGW urlencode
• BZ - 1206963 - rgw: object set attrs clobbers object removal bucket index update
• BZ - 1212524 - .rgw pool contains extra objects
• BZ - 1213988 - RGW Swift API: response for PUT on /container does not contain the mandatory Content-Length header when FCGI is used
• BZ - 1213999 - rgw: keystone token cache does not work correctly
• BZ - 1214051 - rgw: bucket/object owner override when setting acls
• BZ - 1214058 - rgw: setting bucket attributes (swift POST on bucket) sometimes fail
• BZ - 1214854 - Request for object over 512K using range header fails when using swift api.
• BZ - 1222091 - rgw: broken multipart upload when resending parts
• BZ - 1231969 - librbd: aio calls may block
• BZ - 1234516 - RH-COMMON: librbd-0.80.8 does not add compatibility symlink for older qemu versions
• BZ - 1245785 - Objecter: resend linger ops on split

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal