RHBA-2015:1911 - Bug Fix Advisory

Topic

Updated Satellite 6.1 packages that fix several bugs are now available.

Description

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without needing to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.

Notable bugs in this erratum:

• The web UI had several usability issues. (BZ#1135918, BZ#1131095,

BZ#1193867, BZ#1245485)

• In some situations, creating an activation key could cause the browser

to hang. (BZ#1204929)

• Fetching a product or repository list which contained a large number of

tasks could take several minutes. (BZ#1253802)

• Hammer commands for repositories did not show all repositories

or properly show if a repository was enabled. (BZ#1230153, BZ#1236193)

• The hammer command for role filters worked with the role ID, but not

with the role name. (BZ#1230884)

• If the hammer ping command had the wrong credentials passed to it, every

module returned a status except for pulp_auth. (BZ#1238458)

• The puppet-module list and info commands did not return any module

information because of missing product options. (BZ#1127382)

• Capsules which were separated from the Satellite Servers by certain

firewalls could have their connections lost. Heartbeats were added to
keep the connection alive. (BZ#1249890, BZ#1263382, BZ#1264518,
BZ#1267156)

• Large repositories encountered occasional performance issues.

(BZ#1217789, BZ#1248167)

• In some situations, a virtual machine was improperly configured with the

MAC address of its hypervisor. (BZ#1261253)

• Users could not override a host's Puppet CA and master if these

values were set on the host group. (BZ#1193812)

• Syncing multiple repositories with kickstart trees for the same operating

system resulted in an error. (BZ#1208618)

• The installer log file would report an "Error: <NilClass>" message.

This error message has been removed. (BZ#1219792)

• Passing in an unquoted number to the settings API resulted in an error.

The API now accepts valid json input. (BZ#1241077)

• If a content view promotion task was canceled, that task was not

propagated to the capsule. This caused subsequent syncs to fail.
(BZ#1242631)

• Disabling content sets generated an error if the content was already

used in a content view. (BZ#1244314)

• Red Hat Enterprise Linux OpenStack Platform users could not provision

via Nova due to the default SELinux policy. The policy was updated.
(BZ#1249788)

• Installing Satellite would not force the database to use UTF-8.

(BZ#1255520)

• Users reported that debug certificates stopped working after a manifest

refresh. (BZ#1259248)

• Hosts could not register to capsules using custom certificates.

(BZ#1259294)

• DHCP requests did not go through capsules, therefore breaking capsule

isolation. (BZ#1259698)

• Users could not add new BMC interfaces when provisioning. (BZ#1263610)
• Complex class parameters could result in error messages. (BZ#1263962)

Users of Red Hat Satellite are advised to upgrade to these updated
packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update this system to include these fixes ensure your system has access to the latest Red Hat packages:

https://access.redhat.com/articles/11258

Then run:

# yum update

and re-run the installer to complete the upgrade:

# katello-installer --upgrade

Affected Products

• Red Hat Satellite 6.1 for RHEL 7 x86_64
• Red Hat Satellite 6.1 for RHEL 6 x86_64
• Red Hat Satellite Capsule 6.1 for RHEL 7 x86_64
• Red Hat Satellite Capsule 6.1 for RHEL 6 x86_64

Fixes

• BZ - 1127382 - Unable to list puppet-modules since product options are missing
• BZ - 1131095 - [RFE] Unable to sort tasks on state or result
• BZ - 1135918 - Clear ("x") link missing from search box
• BZ - 1163380 - passenger-status broken on sat6 on rhel7
• BZ - 1193812 - Override puppet configuration on host level does not work if specified on host group
• BZ - 1193867 - dashboard too wide, some boxes are hidden too on the right
• BZ - 1202907 - sat 6 no longer offering a suggested IP address after upgrade
• BZ - 1204929 - activation key - create: "Loading...." hangs on UI due to 404/elasticsearch error
• BZ - 1208618 - ActiveRecord::RecordInvalid: Validation failed: Title has already been taken
• BZ - 1217789 - PurgeEmptyErrata and PurgeEmptyPackageGroups can timeout on large repos
• BZ - 1219792 - On successful completion of upgrade, katello-installer.log ends with Error: <NilClass> nil
• BZ - 1230153 - Cannot list Available-repositories in repository set using hammer cli in nightly
• BZ - 1230884 - hammer role filter does work with ID but not with name
• BZ - 1238458 - Hammer ping output has no response for pulp_auth only on providing wrong credentials
• BZ - 1241077 - API settings unquoted integer provided gives error
• BZ - 1242631 - Cancellation of node sync tasks not propagated to the agent/capsule
• BZ - 1244314 - Disabling used repository_set removes repo already from candlepin and pulp before chcking it is used
• BZ - 1245485 - Web UI gets javascript error that crashes browser when viewing tasks
• BZ - 1248167 - [RHCI] Connection aborted BadStatusLIne during rhci synchronizing content
• BZ - 1249788 - OpenStack is prevented from connecting to Nova by SELinux (port 8774)
• BZ - 1249890 - Support heartbeats on qpid 5647 port
• BZ - 1253802 - Fetching product or repo list using sync plans with large number of tasks takes minutes
• BZ - 1255520 - foreman, candlepin, gutterball databases use default encoding vs explicit UTF8
• BZ - 1259248 - Error when generating debug certificate after refreshing manifest
• BZ - 1259294 - Isolated capsule/reverse proxy doesn't work when using custom certificates
• BZ - 1259698 - Proxy cannot be configured with remote DHCP server
• BZ - 1263610 - Unable to add BMC interface
• BZ - 1264518 - qdrouterd should have configurable heartbeats for listeners and connectors

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal