RHBA-2015:2118 - Bug Fix Advisory

Topic

Updated sos package that fixes several bugs and adds various enhancements are now available for Red Hat Enterprise Linux 7.

Description

The sos package contains a set of utilities that gather information from system hardware, logs, and configuration files. The information can then be used for diagnostic purposes and debugging.

This update fixes the following bugs:

• Various OpenStack plug-ins for the sosreport utility were collecting passwords in plain text. As a consequence, the compressed file created after using sosreport could contain human-readable passwords. This update adds obfuscation of all passwords to sosreport OpenStack plug-ins, and the affected passwords in the sosreport tarball are no longer human-readable. (BZ#1243092, BZ#1240666)
• When using sosreport in interactive mode, the "--name" and "--ticket-number" command-line options did not have any effect. As a consequence, the default option values in interactive sosreport prompts were not updated with the provided options. Now, "--name" and "--ticket-number" work as expected, and when either of them is provided in sosreport's interactive mode, the interactive prompts reflect it accordingly. (BZ#1185093)
• The cluster plug-in incorrectly created a directory for the destination path used by the crm_report utility. As a consequence, crm_report failed because the existing directory and its output was not collected. Now, the cluster plug-in does not create the directory for crm_report and lets crm_report create it by itself. As a result, the cluster plug-in collects crm_report output as expected. (BZ#1200526)
• Using the sosreport tool did not generate an HTML report even when the "--no-report" option was not used. The default value of "--no-report" has been set correctly, which ensures that sosreport generates the HTML report unless "--no-report" is used. (BZ#1219720)
• When using the sosreport tool on an OpenStack Neutron node, the openstack_neutron plug-in for the sos utility failed to collect data from the OpenStack Networking service. With this update, the condition detecting Neutron and Quantum client installations has been adjusted to be more accurate, and openstack_neutron now collects Neutron data reliably.

(BZ#1213315)

• The ovirt plug-in for the sos utility did not properly obfuscate the passwords in the ovirt-engine setup answer file, and the passwords were thus collected in plain text. With this update, the passwords are now obfuscated as intended, and no longer collected. (BZ#1162788)
• Under certain circumstances, the hpasm plug-in for the sos utility became unresponsive and collected no data. This update disables the timeout when calling sosreport with the hpasm plug-in, and hpasm no longer becomes unresponsive. (BZ#1214209)

In addition, this update adds the following enhancements:

• The foreman plug-in has been extended. It newly generates foreman-debug for Satellite 6, thus allowing users to gather details about Satellite 6 system environment. (BZ#1135317)
• The sosreport tool has been enhanced in a number of ways that allow it to run in a super-privileged container (SPC) in order to be able to inspect the containing host. (BZ#1185990)
• The chrony plug-in has been added to the sos package. The plug-in captures configuration data and command outputs from the Chrony network time protocol, and thus allows users to gather information about the chrony package environment. (BZ#1165418)
• The sosreport tool is now able to collect process-related information from various applications, including ptp, lastlog, and ethtool. As a part of this change, the "startup" plug-in has been renamed to "services" in order to better communicate its function. (BZ#1195087)
• The saphana, sapnw, and vhostmd plug-ins have been added to the sos package. The plug-ins capture various configuration data and logs and command outputs from SAP Hana and SAP NetWeaver, and thus allow users to gather details about the SAP Hana and SAP NetWeaver system environment. (BZ#1195608)

Solution

Users of sos are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.3 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.2 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.4 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.3 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1135317 - RHEL 7 sosreport integration for Satellite 6 Capsule server debugging
• BZ - 1162788 - remove password leak from ovirt-engine setup answer file
• BZ - 1165418 - sosreport does not collect chrony config files
• BZ - 1183265 - Sosreport doesn't collect conf.modules.d for httpd 2.4
• BZ - 1185990 - Support running sos inside a container
• BZ - 1197006 - rabbitmqctl cluster_status output missing from the rabbitmq plugin.
• BZ - 1206633 - networking plugin fails if NetworkManager is disabled
• BZ - 1209454 - Fix "ip addr" collection
• BZ - 1210906 - Add /var/log/mysqld.log to sos mysql/mariadb plugin
• BZ - 1236101 - sos should collect engine-config settings and domain information
• BZ - 1236111 - activemq plugin does not collect configuration files or logs
• BZ - 1236124 - Cluster plugin not activated when only luci is present on the system (while it collects files also for luci)
• BZ - 1238349 - [RFE] Add openstack_trove plugin to sos
• BZ - 1240666 - openstack_neutron does not obscure passwords, secrets etc.
• BZ - 1242507 - RHEL7: backport ovs patches to capture logs and db

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal