RHBA-2015:1721 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.

Description

Red Hat Enterprise Linux OpenStack Platform provides the facilities for
building a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

This update addresses the following issues:

• This rebased openvswitch package contains the following notable

enhancement:

• ** Contains an updated snapshot from the LTS upstream 'branch-2.3' that

includes multiple bugfixes.(BZ#1250222)

• A bug discovered in django_openstack_auth made token handling with PKI

tokens unreliable. As a result, a user could not access his projects,
project selectors stayed empty.
With this update, token handling is fixed and users can access their
projects. (BZ#1236620)

• With this release, python-eventlet is now rebased to version 0.17.4.

This version includes an important bug fix:

• ** A bug prevented usage of SSL endpoints is now fixed. (BZ#1245028)
• With this release, a new method to track PIDs in forked processes when

using oslo.concurrency is now available. Without this feature, the fix
for CVE-2015-3241 in openstack-nova will not work correctly. (BZ31242027)

• With this update, the package python-pytimeparse is rebased to version

1.1.5 for openstack-gnocchi, so that gnocchi-dbsync can work successfully
without any ImportErrors. (BZ#1252504)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 7 runs on Red Hat Enterprise
Linux 7.1.

The Red Hat Enterprise Linux OpenStack Platform 7 Release Notes (see the
References section) contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 7,

including which channels need to be enabled and disabled.

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 7 x86_64

Fixes

• BZ - 1236620 - Project drop down doesn't display available projects in kilo
• BZ - 1245028 - ValueError: empty or no certificate, match_hostname needs a SSL socket or SSL context with either CERT_OPTIONAL or CERT_REQUIRED
• BZ - 1252504 - gnocchi-dbsync fails to run due to missed module

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal