RHBA-2016:1501 - Bug Fix Advisory

Topic

Red Hat Satellite 6.2 now available for Red Hat Enterprise Linux 6 and 7

Description

Red Hat Satellite is a systems management tool for Linux-based
infrastructures. It allows for provisioning, remote management and
monitoring of multiple Linux deployments with a single, centralized tool.
It performs provisioning and configuration management of predefined
standard operating environments.

This update provides Satellite 6.2 packages for Red Hat Enterprise Linux 6 and 7 Satellite server. For the full list of new features provided by Satellite 6.2 see the Release Notes linked to in the references section. Please see the Satellite 6 Installation Guide for detailed instructions on how to install or upgrade from prior versions of Satellite 6.

All users who require Satellite version 6.2 are advised to install these new packages.

Changes to the Capsule component:

• Kerberos issues with IPA Realm integration would cause provisioning to fail in Satellite 6.1. This has been resolved in Satellite 6.2, and provisioning will work with this setup. (BZ#1305402)

Changes to the Compute Resources component:

• Satellite 6.2 features performance fixes, including provisioning to clusters if they are contained in a nested folder. (BZ#1314090)

Changes to the Content Management component:

• This release introduces the ability to provision Red Hat Atomic Host in addition to standard Red Hat Enterprise Linux. This includes syncing down Atomic Content, promoting that content through a lifecycle environment, and provisioning Atomic Hosts. (BZ#1315043)
• With this release, users of Red Hat Satellite 6.2 can sync down repositories protected by basic authentication by providing the username and password in the repository string. (BZ#1174948)
• Elastic Search has been removed from Red Hat Satellite. It has been replaced by the standard searching provided by the database. (BZ#1259374)
• With this release, the content dashboard in Red Hat Satellite 6.1 has now been combined into the main dashboard, providing a single point of summary information for the user. (BZ#1146874)

Changes to the Content Views component:

• Satellite 6.2 provides improvements to Bulk Actions and Host Collections. Changing the content view in the web UI now works as intended. (BZ#1315280)
• With this release, content view versions in Red Hat Satellite 6.2 have been improved to show the version of the puppet module that is included. (BZ#1241975)

Changes to the Disconnected component:

• This release introduces the ability to export content from one Satellite Server and import it into another server. The content can come from the Library, or can be from a content view. This feature can be used to support populating an air-gapped server with content from another server. (BZ#1127456)

Changes to the Pulp component:

• Satellite 6.2 provides substantial improvements to content synchronization. These improvements include improved messages in cases where content synchronization is considered successful, even though one or more packages failed to download. (BZ#1292953)

Changes to the Remote Execution component:

• This release adds a Remote Execution feature that allows users to execute commands against machines under inventory. The commands can be stored as jobs, and can be scheduled to run in the future or on a recurring basis. (BZ#1131296)

Changes to the Subscription Management component:

• With this release, the virt-who agent can now be installed on the same machine where the main Satellite Server is hosted. (BZ#1209467)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied and that the Satellite is updated to the most recent 6.1.x release.

For details on how to apply this update, refer to:

https://access.redhat.com/documentation/en/red-hat-satellite/6.2/single/installation-guide#upgrading_satellite_server_and_capsule_server

Affected Products

• Red Hat Satellite 6.2 for RHEL 7 x86_64
• Red Hat Satellite 6.2 for RHEL 6 x86_64
• Red Hat Satellite Capsule 6.2 for RHEL 7 x86_64
• Red Hat Satellite Capsule 6.2 for RHEL 6 x86_64

Fixes

• BZ - 1052273 - [RFE] Remote system management
• BZ - 1052298 - [RFE] Testing a connection for compute resources do not provide positive feedback
• BZ - 1091844 - Content view: need to click "go back" twice to return from content Packages/Errata
• BZ - 1100284 - [RFE]Registering a host (which is not provisioned by foreman) via rhsm should show up in foreman
• BZ - 1101998 - EC2 Security Groups - empty box
• BZ - 1102895 - while content hosts are being added, elasticsearch queries fail
• BZ - 1105671 - [RFE] When adding Amis to the EC2 compute resource I would like to be told if I typed in a bad ami
• BZ - 1110383 - hammer cli associates DNSproxy to subnet & domain even when sat6/capsule is not configured for DNSproxy
• BZ - 1113753 - Firebug complains 'Response is not valid JSON' on clicking a custom product repo
• BZ - 1127458 - [RFE] Provide Capability Similar to rhn-satellite-exporter in Satellite 5 for Satellite 6
• BZ - 1128187 - Display valid error message when I try to reimport the same manifest in same org
• BZ - 1128514 - [RFE] Sync Status page - Disable 'Synchronize Now' button until atleast one repo is selected for sync.
• BZ - 1131146 - pulp puppet directory import does not delete missing files
• BZ - 1132405 - Allow compute resources to have spaces in the name
• BZ - 1134021 - pulp-manage-db drops and rebuilds all indices every run
• BZ - 1136091 - hammer content-host errata apply is only async operation
• BZ - 1136361 - define new log level for caught exception tracebacks
• BZ - 1136841 - improve error message when repository set enablement fails
• BZ - 1138866 - Error in foreman/production.log when trying to save a content view in content host Details page
• BZ - 1139260 - [RFE] Lost link between host and content-host
• BZ - 1142113 - As a user, I would like my Pulp logs to go to logical locations
• BZ - 1146874 - [RFE] Dashboard and Content Dashboard confusing and therefor not a real single management overview page
• BZ - 1156536 - hammer activation-key allows bad max-content-hosts value when unlimited-content-hosts is true
• BZ - 1157294 - Bulk Actions - Errata - Message states more errata than exist
• BZ - 1158893 - host collections do not display errata information
• BZ - 1160181 - private method `select' called for nil:NilClass (NoMethodError) when trying to sync a repo
• BZ - 1166891 - hammer content-hosts missing content override
• BZ - 1171884 - [RFE] show if Capsules are synced in Satellite 6 webui
• BZ - 1171907 - [RFE] Discovery manual provisioning via ISO (USB)
• BZ - 1174237 - Composite views allow promotions beyond what they should
• BZ - 1174948 - [RFE] Have Pulp support Basic Authentication in Repo URL's
• BZ - 1175404 - katello-disconnected configure --help typo
• BZ - 1175493 - pulp puppet directory import does not delete missing files
• BZ - 1178046 - Bulk Action Errata only applies foreman entries_per_page number of errata
• BZ - 1179839 - Comment box on Publish New Version within Content Views is tiny
• BZ - 1183035 - VM with VDC subscription gets unentitled when it migrate
• BZ - 1187317 - Deleting hosts from the "All Hosts" listing leaves them as Content Hosts.
• BZ - 1191248 - Repeating error messages when adding a new organization or location
• BZ - 1192356 - On updating the content-host limit with long integer under activation-key, UI neither raised any error nor save the changes
• BZ - 1193282 - Content View Publish: Description field is never shown
• BZ - 1193658 - (JSON::ParserError) 203: unexpected token at 'NaN,"progress_weight":10}'
• BZ - 1193685 - Cannot change the docker upstream name for a repository that doesn't have a sync url
• BZ - 1193803 - manifest "imported successfully", but corresponding task ended with warning: RestClient::RequestTimeout: Katello::Resources::Candlepin::Owner: Request Timeout (POST /candlepin/owners/Default_Organization/imports)
• BZ - 1194493 - [RFE]Best practice change password of root schedule 90 days and have option to input the password or random it
• BZ - 1195940 - katello-service do not handle PostgreSQL service
• BZ - 1196673 - task list page is very slow
• BZ - 1199289 - [RFE] As a I user, I want to enable docker repositories from the Red Hat CDN
• BZ - 1199548 - RFE: Add label to column header in Capsule list
• BZ - 1201408 - Infrastructure > Capsules > Certificates. It is not possible to delete a pending certificate signing request.
• BZ - 1202111 - As a user I'd like to select the scap proxy
• BZ - 1203265 - [RFE] add mCollective to Satellite 6
• BZ - 1204923 - Parameters passed to Docker container are not being used when creating new container
• BZ - 1204927 - RFE: container name should be optional
• BZ - 1204962 - changing system content view or environment results in candlepin error (No entitlements for products)
• BZ - 1205354 - Lifecycle environment icons display during activation key loading
• BZ - 1206243 - Api for available_clusters on vmware does not return expected value.
• BZ - 1207496 - Activation Keys: Toggles in "Product Content" are slow - need to be more responsive or use a spinner
• BZ - 1209467 - [RFE] Allow virt-who to be installed on a Satellite 6 instance
• BZ - 1212024 - Intermittent error downloading a large RPM with pulp 2.6.0 (Sat 6.1 compose from 3/17)
• BZ - 1218289 - UI raises 500 ISE on refreshing facts of a discovered host which is down/poweroff
• BZ - 1219585 - [RFE] Need way to promote latest version of Content View to next environment via hammer
• BZ - 1219599 - Docker Plugin is not picking up Translations
• BZ - 1221617 - Spelling for lifecycle environment under capsules -> Lifecycle environment should be corrected
• BZ - 1223776 - [RFE] hammer import does not handle invalid csv files correctly
• BZ - 1223953 - content-view add-repository silently fails if product is not provided
• BZ - 1223987 - WebUI: Changing release version in content host errored
• BZ - 1226332 - virt-who does not correctly report to Satellite 6 when using multiple types of source (RHEV and VMware)
• BZ - 1228384 - hamer create a filter with an in correct types returns a bad error message
• BZ - 1230710 - Can't create container from external registry
• BZ - 1230930 - Can't create external registries from API or CLI
• BZ - 1231362 - [RFE] Exposed ports support
• BZ - 1234766 - No handlers could be found for logger "pulp.server.db.connection" in satellite 6.0
• BZ - 1236247 - [RFE] Email Reporting for OpenSCAP Policy
• BZ - 1242943 - Having no applicable Errata does not hint to uncheck applicable
• BZ - 1243979 - celery startup never returns if mongodb is down
• BZ - 1246148 - It's hard to see in the logs if Pulp's celery components are not fully functional
• BZ - 1246262 - sync plan dates saved incorrectly if I dont use the calendar widget
• BZ - 1246392 - foreman-proxy Failed to send SCAP results to the Foreman server: 500 "Internal Server Error"
• BZ - 1246606 - [RFE] Pulp can lazily fetch yum repositories
• BZ - 1247313 - Cannot get information for a running docker instance by name with hammer
• BZ - 1248232 - Extra Sub Directory created for DRPM content, CentOS client failing to get update with Error 404
• BZ - 1250104 - [RFE] pulp-admin tasks list filter output on state and time
• BZ - 1250158 - Duplicate subscriptions shown in Activation key
• BZ - 1251812 - Stage Candlepin WEBUI display Oops! when run virt-who with 100 guests in host
• BZ - 1252945 - Copying an activation key does not copy service level
• BZ - 1253376 - Foreman task view does not respect user timezone
• BZ - 1254102 - Discovery rules page "undefined method `name' for nil:NilClass" in case hostgroup was deleted
• BZ - 1256494 - Cannot view content host errata with view_content_host permission
• BZ - 1257603 - Running foreman-rake db:seed multiple times results in duplicate OpenSCAP content entries
• BZ - 1257660 - OpenSCAP UI still informs user to distribute SCAP content, when it is no longer required.
• BZ - 1257740 - Reported times in OpenSCAP 'Compliance Reports' list are wrong
• BZ - 1259374 - [RFE] Scoped Search Conversion
• BZ - 1259498 - docker registry command does not provide IDs
• BZ - 1261068 - Repository syncs are reporting warnings saying: "Sync Incomplete"
• BZ - 1261408 - OpenSCAP content is not associated with any organization
• BZ - 1262073 - Pulp tasks tries to connect to 127.0.0.1 instead of localhost hostname
• BZ - 1262809 - Selecting Content View in New Hosts page raises 'NoMethodError' in backend.
• BZ - 1264502 - pulp-puppet-module-builder fails when there are no 'Modulefile' metadata files
• BZ - 1265165 - 'Name can't be blank' error under parameter tab, on creating a hostgroup with activation-key
• BZ - 1265742 - Puppet agent on Sat6 always gives warning
• BZ - 1267522 - Hostgroup Jail missing access to subscription_manager_configuration_url
• BZ - 1268089 - Need to hide "Docker Images" tab from Red Hat Repositories
• BZ - 1271221 - API Listing repositories slow, 24 repositories of redhat server product takes 30 seconds
• BZ - 1273642 - Can't grant users permission to promote a content view
• BZ - 1274024 - Able to create job templates with duplicate names
• BZ - 1274045 - Job templates: template diff and details blank on audits page
• BZ - 1274693 - Auto-attach subscriptions not working for content hosts with custom products only
• BZ - 1276479 - Deleting composite view version fails with TypeError: Value (NilClass) '' is not any of: ForemanTasks::Concerns::ActionSubject
• BZ - 1279466 - Pulp fails to properly cancel tasks after a pulp worker dies.
• BZ - 1282657 - Typo in katello/repository.rb
• BZ - 1285276 - After closing task it will re-appear again.
• BZ - 1285291 - all packages listed when listing errata
• BZ - 1286033 - Checkbox "Preallocate disk" doesn't get saved for a Compute Profile
• BZ - 1286803 - repomd.xml parsing fails when an empty revision tag is present
• BZ - 1286928 - Errors found switching from openscap policy causing satellite to hang
• BZ - 1287129 - Manifest import gets really slow for increasing number of entitlements in one pool
• BZ - 1287157 - [RFE] export and import of yum content
• BZ - 1288656 - checksum-type does not updated on already synced repository at Satellite Capsule.
• BZ - 1289384 - Include foreman-rake foreman_tasks:cleanup with Satellite
• BZ - 1291271 - Deleting users who created activation keys deletes all associated keys
• BZ - 1291975 - Can't pull specific docker tag from Satellite repository
• BZ - 1292713 - Errror on creating hostgroup: undefined method `content_facet' for #<Hostgroup:0x0000001036b338>
• BZ - 1293463 - [RFE] Improve User Experience in Insights when the User is Unauthenticated
• BZ - 1294674 - Undefined variable unknown_paths when candlepin references not available repository
• BZ - 1294676 - rbovirt: sat6 times out when listing VMs in RHEV compute resource
• BZ - 1295706 - puppet agent -t -v fails with "Error: Could not retrieve catalog from remote server: Error 400 on SERVER"
• BZ - 1296334 - Unsuccessful Errata install marked success
• BZ - 1297523 - Update Red Hat Access Plugin to work with Rails 4
• BZ - 1302801 - Need method to view pools belonging to a given subscription
• BZ - 1303161 - crontab entry creating multiple emails
• BZ - 1303278 - EPEL5 import fails due to missing 'description' elements in updateinfo
• BZ - 1305402 - Unable to provision hosts using IPA realm Proxy in Capsule
• BZ - 1306622 - Repository sync is broken
• BZ - 1306849 - Refactor Red Hat Access Client JS to Proxy through Satellite
• BZ - 1306850 - Refactor Red Hat Access Lib to be a Proxy to Restful Services on redhat.com
• BZ - 1310687 - Differentiate between no proxies found and all proxies found are not available
• BZ - 1311526 - content view and repository history and tasks should contain details
• BZ - 1311678 - Repository refresh is updating certs on main pulp server
• BZ - 1311738 - verify config setting before repo export
• BZ - 1311821 - Unable to re-sync repos after Manifest delete and re-Import: RPM1004: Error retrieving metadata: Not found
• BZ - 1312629 - Downloading on_demand RPM content results in 500 error
• BZ - 1312640 - hammer repo export throws error: unknown file type:
• BZ - 1313069 - Remove ostree branches from the API and UI
• BZ - 1313346 - Synchronization of Docker-based repositories fail silently
• BZ - 1313356 - Remote Execution integration in Katello host details page fails in Javascript
• BZ - 1313664 - Unable to delete discovered hosts via multi-selections
• BZ - 1313671 - Hostgroup with rules is not prevented from deletion
• BZ - 1313673 - Impossible to select OS and media on discovered hosts
• BZ - 1313675 - Discovery breaks ignore_puppet_facts_for_provisioning global setting
• BZ - 1313777 - Boot images names in discovery stanza of 'PXELinux global default' template needs to be updated
• BZ - 1313854 - Default provisioning template does not try to configure ssh keys
• BZ - 1313860 - Smart proxy does not start with SYSLOG setting
• BZ - 1314090 - Provisioning fails with VMware Compute Resource if the vCenter's datacenter is using nested folders.
• BZ - 1314167 - Refresh Features on 6.2 embedded Capsule throws error
• BZ - 1314228 - Undefined method error when observing humanized input on delayed task
• BZ - 1314302 - Export CV 'since datetime' is failed with error undefined method `iso8601'
• BZ - 1314330 - Job invocation failed for selected host when remote-execution feature is enabled on proxy
• BZ - 1314354 - unable to select oscap XCCDF profile while creating a policy
• BZ - 1314362 - Getting 500 if job invocation validation fails
• BZ - 1314519 - Specify string column limits
• BZ - 1314563 - katello:reindex is not currently reindexing docker content
• BZ - 1314839 - image-based provisioning via vmware fails on `wrong number of arguments (2 for 1)`
• BZ - 1315043 - [RFE] As a user I want to see ostree information published in a content view
• BZ - 1315263 - Custom product content is not syncing to capsule
• BZ - 1315266 - Capsule stops listening on 9090 after log rotate
• BZ - 1315278 - Incremental update using cli does not update systems when --update-all-systems=true is passed
• BZ - 1315430 - [RFE] As a user I want to be able provision atomic and have it register via subscription manager
• BZ - 1315588 - OSTree content unit count not updating on repo details page after sync
• BZ - 1315686 - pulp_streamer service fails to start with [Errno 13] Permission denied
• BZ - 1315769 - [RFE] UI - As a user I want to be able to sync a CDN based rpm-ostree repo
• BZ - 1315817 - Facts are deleted when a discovered host is provisioned, breaking kexec template for PXEless
• BZ - 1315896 - Convert to use Global Notifiations
• BZ - 1315965 - Number of packages in repo are not updated after incremental import
• BZ - 1316110 - hammer import repository-enable/content-views fails to create any CVs
• BZ - 1316374 - Cannot create docker container with 'docker-1.8.2-7' package installed
• BZ - 1316662 - 'Consumed' field in Activation keys summary page is confusing with 'Consumed' field in Subscriptions
• BZ - 1316688 - Activation keys summary page 'consumed' shows zero after registering content hosts
• BZ - 1316944 - Reduce the number of dynflow actions on a capsule sync
• BZ - 1317107 - [RFE] CLI - As a user I want to be able to view ostree info
• BZ - 1317505 - syncing a repo throws 500 ISE
• BZ - 1317674 - hammer host-collection create fails with undefined local variable or method `option_host_ids'
• BZ - 1317679 - activation key product content is not shown when multiple orgs share content
• BZ - 1317733 - [RFE] As a user I want to see ostree information published in an environment
• BZ - 1317968 - Publishing or Promoting a content view with a non-running capsule pauses the task with error
• BZ - 1317986 - Failed pulp tasks are not resumable.
• BZ - 1318422 - Pulp-nodes-parent and pulp-nodes-common should not be installed on the main katello server
• BZ - 1318423 - Ensure that the capsule installer sets up a standard pulp server
• BZ - 1319287 - Can't create a puppet module repo on capsule
• BZ - 1319309 - duplicate key value violates unique constraint errors
• BZ - 1319766 - No validation for compute resource description length
• BZ - 1319791 - Cannot access docker compute resource via compute profile.
• BZ - 1319908 - Cannot publish content view with docker repository.
• BZ - 1320225 - "Errata by id" exclude filter does not seem to exclude errata
• BZ - 1320338 - Can't use hammer docker commands. API routes changed.
• BZ - 1320422 - Registering a atomic host with satellite server failed with validation error: Medium Atomic_media does not belong to RedHat 7.2 operating system
• BZ - 1320492 - Discovery Rules should run on priority basis, the rule with higher priority should execute first
• BZ - 1320575 - Error on incremental update PulpExecutionException on errata unit copy
• BZ - 1321020 - kexec template not automatically associated with Satellite created operating systems
• BZ - 1321084 - Syncing capsule causes SSL errors
• BZ - 1321089 - Bulk action via remote execution does not work with multiple hosts
• BZ - 1321104 - Configuration status is getting marked out of sync incorrectly
• BZ - 1321129 - Once you add a repo to a content view, you cannot remove it
• BZ - 1321137 - Syncing to a capsule without pulp-katello package does not work
• BZ - 1321152 - unable to lazy sync repos on el6
• BZ - 1321549 - selecting template while creating compute profile should automatically populate network and storage
• BZ - 1321589 - unable to export repository directly to /var/www/html/pub/export
• BZ - 1321644 - Pulp celery_beat and resource_manager no longer running
• BZ - 1321710 - Can't modify frozen Hash error when trying to reregister a content-host after subscription-manager clean
• BZ - 1321919 - Atomic host upgrade fails with error: Server returned status 404: Not Found
• BZ - 1322062 - Successfully updating a host with an errata results in warning on task
• BZ - 1322392 - Don't enable the remote execution plugin on the proxy by default when on RHEL 6
• BZ - 1322938 - compliance reports from a particular org should be visible when org context is set
• BZ - 1322949 - unable to delete compliance reports
• BZ - 1322959 - Unit tests are broken after hammer_cli_foreman refactor
• BZ - 1322990 - compliance report searches fails
• BZ - 1323130 - Update ipxe-bootimgs package
• BZ - 1323504 - Syncing repostitory results in WARNING state (orange) with error
• BZ - 1323509 - Unable to create custom yum repo - Runtime error - zero length field name in format
• BZ - 1323715 - Synchronizing RHEL 5 repos fail with Field is required: ['variant']
• BZ - 1323726 - Installing errata from satellite UI failed
• BZ - 1323745 - RFE: Add capability to use a Gemfile.local file
• BZ - 1323793 - Unable to login via the Red Hat Access module
• BZ - 1324211 - deleting a container using hammer silently fails without error
• BZ - 1324330 - Puppet classes can not be attached to content view
• BZ - 1324620 - Subnets -> Capsules -> `Discovery Proxy` should be renamed to `Discovery Capsule`
• BZ - 1324884 - hammer activationkey product-content command failed
• BZ - 1325339 - Repository synchronization fails with "not a valid ObjectId, it must be a 12-byte input or a 24-character hex string"
• BZ - 1325352 - content view publish failed
• BZ - 1326815 - Capsule sync failed while syncing docker contents: [E] DKR1008: Could not find registry API at <http://sat_server>:5000 (Katello::Errors::PulpError)
• BZ - 1326948 - Incremental update failed when specifying multiple errata

CVEs

• CVE-2015-5152
• CVE-2015-5282
• CVE-2016-3107
• CVE-2016-3108
• CVE-2016-3111
• CVE-2016-3112
• CVE-2016-3728

References

• http://www.redhat.com/security/updates/classification/#normal