RHBA-2015:2091 - Bug Fix Advisory

Topic

Updated dracut packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7.

Description

The dracut packages include an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.

This update fixes the following bugs:

• In the initramfs, the Dynamic Host Configuration Protocol (DHCP) client script for renewing leases did not update the lifetime of the IPv4 address. As a consequence, the IPv4 address could expire for very short lifetime settings, and the network connection failed. Now, the new DHCP client script updates the IPv4 address lifetime. (BZ#1144277)
• If the DHCP server did not provide an IPv4 address lifetime, the DHCP client script in the initramfs did not set up the network correctly. Consequently, there was no network connection in the initramfs. Now, IPv4 address lifetime information is handled correctly. (BZ#1144914)
• Due to a bug, the initramfs exited after a successful download of a live image, and the download of the live image was retried for every network interface. Now, the script only exits on error, and the live image is downloaded only once. (BZ#1152485)
• The fstab file in the kdump initramfs contained the file system check flag for NFS mount points. As a consequence, the fsck flag for the NFS mount points was tried without any consequences. This has been fixed. (BZ#1186699)
• The iSCSI connection script did not wait for all interfaces to be up before connecting to the iSCSI targets in the initramfs. As a consequence, a connection timeout for the iSCSI targets occurred, and the system boot took an excessive amount of time. Now, the script in the initramfs waits for all interfaces to come up before trying to connect to iSCSI targets. (BZ#1189891)
• The hyperv_keyboard kernel module was not included in the initramfs. Consequently, the user could not enter the password for encrypted disks on Hyper-V Gen2 virtual machines. The hyperv_keyboard kernel module is now included in the initramfs. (BZ#1194529)
• Long-lasting modprobes could be killed in the initramfs if the initramfs switched root. As a consequence, the actions of the modprobe scripts were canceled. Now, the initramfs waits for any udev events to be finished before switching root. (BZ#1231373)
• Network interfaces were configured on "add" and "change" udev events. Consequently, the default gateway was lost in the process. With this update, the default gateway setup is no longer lost. (BZ#1238043)
• Due to bugs in the initramfs network setup functions, a duplicate IP address was assigned to an interface without a link connection. As a consequence, the installer set up this configuration as the default configuration. Now, no IP addresses are assigned to network interfaces without a carrier link. (BZ#1249507)
• When starting the Red Hat Enterprise Linux installation and appending the "ip=ibft" installation option on the kernel command line, the installation failed early and entered dracut emergency mode. Now, installation no longer fails. (BZ#1256814)

In addition, this update adds the following enhancements:

• With this update, it is indicated that a duplicate IPv4 address was specified and it is not assigned to other interfaces, which prevents problems with duplicate IP addresses during installation from occurring. (BZ#1202553)
• This update adds a number of cryptographic kernel modules that load on an IBM System z machine if started in FIPS mode, and ensure that the machine satisfies FIPS requirements. (BZ#1215766)
• This update adds a kernel command-line argument to bind an IP to a network interface with a specified MAC address. As a result, dracut now supports specifying the network interface name with "enx[MAC]" in the "ip=" argument. (BZ#1241102)

Users of dracut are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.3 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.2 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.4 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.3 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1152485 - Anaconda with root=live:http boot option fetches squashfs.img for each NIC brought up in initramfs
• BZ - 1167082 - Logging broken when dinfo exists in PATH
• BZ - 1186004 - Inclusion of NFS dracut module disables all netroot=<iscsi traget> options
• BZ - 1187428 - [Hyper-V][RHEL7.1]Add hyperv_fb module to initrd and rootfs
• BZ - 1190098 - IPv6 NFS addresses are parsed incorrectly
• BZ - 1194193 - [RFE] Add squashfs support to rd.writable.fsimg
• BZ - 1199645 - /var/log is a symlink to /run/log
• BZ - 1209962 - dracut man page refers to GRUB, not GRUB 2, grub.conf file
• BZ - 1226004 - Dracut brings up DNS after routes, causing race conditions
• BZ - 1227813 - Installing RHEL from network doesn't work with point-to-point ethernet configured via DHCP
• BZ - 1236190 - dracut -m nfs fails unhelpfully if the nfs-utils package is missing
• BZ - 1236610 - iSCSI boot: dracut: FATAL: "vlan= requires two parameters"
• BZ - 1241547 - 40-redhat.rules not included in initramfs
• BZ - 1242845 - [kexec-tools-2.0.7-27] print some improper information when start kdump service
• BZ - 1263984 - anaconda: module is not blacklisted during installation

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal