RHBA-2016:1414 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.

Description

Red Hat Enterprise Linux OpenStack Platform provides the facilities for
building a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the openstack-neutron-vpnaas component:

• Changes to assigning ownership to the ipsec.secrets of a connection interfered with the operation of VPNaaS when the service was restarted or connections were updated, causing maintenance and re-establishment of connections to eventually fail. With this update, the ownership of ipsec.secrets by the 'root' user has been removed, allowing the service to re-create an updated ipsec.secrets file as required. This allows service restart and connection update operations to succeed. (BZ#1268444)

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 7 runs on Red Hat Enterprise Linux 7.2.

The Red Hat Enterprise Linux OpenStack Platform 7 Release Notes contain the following:

• An explanation of the way in which the provided components interact to form a working cloud computing environment.
• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 7, including which channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/version-7/release-notes/

This update is available through 'yum update' on systems registered through Red Hat Subscription Manager. For more information about Red Hat Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 7 x86_64

Fixes

• BZ - 1268444 - Ownership of ipsec.secrets causes problems on agent restart

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal