Synopsis

Red Hat Enterprise Virtualization Manager (rhevm) bug fix 3.6.7

Type/Severity

Bug Fix Advisory

Topic

Updated RFE packages that fix several bugs and add various enhancements are now available.

Description

The Red Hat Enterprise Virtualization Manager is a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities, resource management, live migrations, and virtual infrastructure provisioning.

The Manager is a JBoss Application Server application that provides several interfaces through which the virtual environment can be accessed and interacted with, including an Administration Portal, a User Portal, and a Representational State Transfer (REST) Application Programming Interface (API).

Changes to the rhevm component:

• Previously, live merge tasks which completed, displayed as running in the Manager. The task will now be presented as completed in the Manager, and will be removed from the appropriate database. (BZ#1348214)
  
• To provide a way how to configure gssapi using ticket cache for authz pool, a new security domain called 'oVirtKerbAAA' was added to JBoss configuration, which can be customized by using the following variables:
  

AAA_KRB5_CONF_FILE=path_to_krb5_conf
Specify the custom krb5.conf file. The default is /etc/ovirt-engine/krb5.conf
Java supports only one krb5 configuration, if the user changes this property, then manage-domains will stop working because its configuration is managed in /etc/ovirt-engine/krb5.conf.

AAA_JAAS_USE_TICKET_CACHE=true/false
Enable or disable using the ticket cache file for authentication.

AAA_JAAS_TICKET_CACHE_FILE=path_to_ticket_cache
Specify the custom ticket cache file. The default is /tmp/krb5cc_${UID}, where UID is the ID of the ovirt user.

AAA_JAAS_USE_KEYTAB=false/true
Enable or disable using the keytab file for authentication.

AAA_JAAS_KEYTAB_FILE=path_to_keytab_file
Specify the custom keytab file. The default is ${OVIRT_HOME}/krb5.keytab where OVIRT_HOME is home directory of ovirt user.

To use one of the features, the user has to create a new configuration file and specify the correct values for those variables, for example: /etc/ovirt-engine/engine.conf.d/99-jaas.conf.

To use the new security domain configuration from aaa-ldap, the user has to specify the correct JAASClientName (default is oVirtKerb). Therefore, to use this new configuration for authz pool, the user has to add following line to aaa-ldap authz configuration:

pool.authz.auth.gssapi.jAASClientName = oVirtKerbAAA

To use it for both authn and authz, the user has to add the following line to aaa-ldap configuration:

pool.default.auth.gssapi.jAASClientName = oVirtKerbAAA (BZ#1327041)

• Previously, only the first page of results were displayed when searching for all virtual machine templates in the system. This issue has been fixed, and now it is possible to view all result pages. (BZ#1338816)
  
• Virtual machines are backed up periodically if the version field changes since the last backup. However, because modifying the virtual machine vNic does not update the version field, virtual machine definitions do not get backed up if only a vNic change occurs. This update ensures that a vNic update will cause virtual machine definitions to be backed up. (BZ#1340628)
  
• Previously the cluster level could be changed while virtual machines were running, which caused non-deterministic issues.
  This update ensures that no virtual machines are running when changing the cluster level. (BZ#1341023)
  
• Previously during vdsm restart, the host would still respond to queries over JSON-RPC protocol from the Manager, which could result in the Manager reporting the incorrect virtual machine state. This could cause a highly available virtual machine to restart despite it already running. This has been fixed and the API calls are blocked during the vdsm service startup. (BZ#1342388)
  
• This update fixes an issue when adding a virtual machine to an existing virtual machine pool via the REST API. The virtual machines did not have the correct initialized parameters for sysprep and cloud-init. (BZ#1342389)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Virtualization 3.6 x86_64
• Red Hat Virtualization for IBM Power LE 3.6 x86_64

Fixes

• BZ - 1143869 - Impossible to limit access to CPU profiles via user WEBUI portal on user/group basis.
• BZ - 1327041 - [RFE] [z-stream clone - 3.6.7] AAA - Make Kerberos work with Java Authentication Framework
• BZ - 1331186 - [events] Host memory usage exceeded defined threshold email message not generated.
• BZ - 1335638 - Groups resolution shouldn't be done on authn stage
• BZ - 1338816 - Template tab doesn't show all templates
• BZ - 1340628 - [downsream clone - 3.6.7] HE Vm's ovf isn't updated according to 'OvfUpdateIntervalInMinutes' value
• BZ - 1341023 - Cluster level can be changed while there are running VMs
• BZ - 1342388 - VM split brain during networking issues
• BZ - 1342389 - REST API vmpool increase won't join domain
• BZ - 1348214 - [z-stream clone - 3.6.7] Live Merge completes but the 'job' table entry in the database is not marked as finished

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal

Red Hat Virtualization 3.6

SRPM
rhevm-3.6.7.5-0.1.el6.src.rpm	SHA-256: 0add7612d9d3b46d89a72008bd4f3c7dbd6dd3ede7469d522c7d62122830d508
x86_64
rhevm-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 78345893ae136260777a9c0dd98cf86b9b117027a6ec48ffee36043d277a0ebe
rhevm-backend-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 1758bed71a0cf090a4d897cd23eba0935bee6bb5aeaa0f8a7f341b3cf6a339f1
rhevm-dbscripts-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 0da2122a7d49ecf40dfd0db0984914ba59f8d16a092ea063821a9d3a397034d1
rhevm-extensions-api-impl-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 27bf77315c105a9e87349b1b1b507799a602f9d70493e0d1c9a15b8d70d5ee94
rhevm-extensions-api-impl-javadoc-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 1af72c562ade09abf00dd3b6d20dc5a8b6f628d63484b0a92cfc07cfa513e2a3
rhevm-lib-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 3657ed999bc9483b4a5dad68f3aabaf112095e564c327b80e8a3785c48899cff
rhevm-restapi-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: a1ffa46a99b3ef06394f6aedc806e325491ecd1bd168efcbd866d0d0ed737754
rhevm-setup-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 2e5079f25f5bd081004dfb80dd12493547c63ba2d3fc72e4fe1abcb6c9189285
rhevm-setup-base-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 749805357a71bd2d2f948cdf141bcab6175f6addadf606ec28cb36d445e817f2
rhevm-setup-plugin-ovirt-engine-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: b79a21710dbf21728cdd4b67b9b8d4fce25505664b4c51fbece5d12d6b3cbc01
rhevm-setup-plugin-ovirt-engine-common-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 456ae93a8e8e66b1acc5ddf4529a24b5b9ec28b18bbf25119c82698f851fc882
rhevm-setup-plugin-vmconsole-proxy-helper-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 1d49c3a3c08857f1f3a78d5244cf0eec0e70d0453425a10165e445e3714e603b
rhevm-setup-plugin-websocket-proxy-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: ca578c9b8cc526599e3ca4397f286bfd5099a80a3674d1c26d813ca9ac1dd4f2
rhevm-tools-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 40b03d8489ec323a4be8520e1550adf1a4698054c1ee912aeb92df12c4edf620
rhevm-tools-backup-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 5ba62a102c37d90ece6f30b5cba29922b63014f05ef288b015434b6dda066916
rhevm-userportal-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 39365efd91b768cd6e101357441c60f3e01925d8a42796b124d51cffac3af31e
rhevm-userportal-debuginfo-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 64585709a7e6d0d8b3afb173451f3d8dc07b02165b888db2c3aa319a40e8ad6d
rhevm-vmconsole-proxy-helper-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: b95cf53cf2cf81b9dbd5eba1e51961a5b59409fa14c9dcce67089e354b543f31
rhevm-webadmin-portal-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 59c44520e386e5ca3719ec87c6424b82a54dc9759a4eeae044c30a3d918078ab
rhevm-webadmin-portal-debuginfo-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: aa75e9751cb7919771833bc3f39bfad480566f3987ee3de7acf90fdc0cf2078e
rhevm-websocket-proxy-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 035f265c4c8b04afef5aec0912cf14365fd7c97373f9b8102e3de7c4b1ee3980

Red Hat Virtualization for IBM Power LE 3.6

SRPM
rhevm-3.6.7.5-0.1.el6.src.rpm	SHA-256: 0add7612d9d3b46d89a72008bd4f3c7dbd6dd3ede7469d522c7d62122830d508
x86_64
rhevm-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 78345893ae136260777a9c0dd98cf86b9b117027a6ec48ffee36043d277a0ebe
rhevm-backend-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 1758bed71a0cf090a4d897cd23eba0935bee6bb5aeaa0f8a7f341b3cf6a339f1
rhevm-dbscripts-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 0da2122a7d49ecf40dfd0db0984914ba59f8d16a092ea063821a9d3a397034d1
rhevm-extensions-api-impl-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 27bf77315c105a9e87349b1b1b507799a602f9d70493e0d1c9a15b8d70d5ee94
rhevm-extensions-api-impl-javadoc-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 1af72c562ade09abf00dd3b6d20dc5a8b6f628d63484b0a92cfc07cfa513e2a3
rhevm-lib-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 3657ed999bc9483b4a5dad68f3aabaf112095e564c327b80e8a3785c48899cff
rhevm-restapi-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: a1ffa46a99b3ef06394f6aedc806e325491ecd1bd168efcbd866d0d0ed737754
rhevm-setup-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 2e5079f25f5bd081004dfb80dd12493547c63ba2d3fc72e4fe1abcb6c9189285
rhevm-setup-base-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 749805357a71bd2d2f948cdf141bcab6175f6addadf606ec28cb36d445e817f2
rhevm-setup-plugin-ovirt-engine-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: b79a21710dbf21728cdd4b67b9b8d4fce25505664b4c51fbece5d12d6b3cbc01
rhevm-setup-plugin-ovirt-engine-common-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 456ae93a8e8e66b1acc5ddf4529a24b5b9ec28b18bbf25119c82698f851fc882
rhevm-setup-plugin-vmconsole-proxy-helper-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 1d49c3a3c08857f1f3a78d5244cf0eec0e70d0453425a10165e445e3714e603b
rhevm-setup-plugin-websocket-proxy-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: ca578c9b8cc526599e3ca4397f286bfd5099a80a3674d1c26d813ca9ac1dd4f2
rhevm-tools-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 40b03d8489ec323a4be8520e1550adf1a4698054c1ee912aeb92df12c4edf620
rhevm-tools-backup-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 5ba62a102c37d90ece6f30b5cba29922b63014f05ef288b015434b6dda066916
rhevm-userportal-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 39365efd91b768cd6e101357441c60f3e01925d8a42796b124d51cffac3af31e
rhevm-userportal-debuginfo-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 64585709a7e6d0d8b3afb173451f3d8dc07b02165b888db2c3aa319a40e8ad6d
rhevm-vmconsole-proxy-helper-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: b95cf53cf2cf81b9dbd5eba1e51961a5b59409fa14c9dcce67089e354b543f31
rhevm-webadmin-portal-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 59c44520e386e5ca3719ec87c6424b82a54dc9759a4eeae044c30a3d918078ab
rhevm-webadmin-portal-debuginfo-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: aa75e9751cb7919771833bc3f39bfad480566f3987ee3de7acf90fdc0cf2078e
rhevm-websocket-proxy-3.6.7.5-0.1.el6.noarch.rpm	SHA-256: 035f265c4c8b04afef5aec0912cf14365fd7c97373f9b8102e3de7c4b1ee3980