RHBA-2016:1615 - Bug Fix Advisory

Topic

Updated Satellite 6.2 packages that fix several bugs are now available.

Description

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.

This update fixes the following bugs:

• Different virt-who instances were reporting UUIDs and host names which resulted in duplicate host names. A new virt-who has been delivered which allows users to standardize on a single virt-who instance. (BZ#1227986)
• Failures in Puppet module upload were not being propagated to the command line. These failures are now reported correctly. (BZ#1234619)
• A new hammer plug-in is now available which allows users to more easily enable and disable all logging on a Satellite Server. (BZ#1305085)
• The katello-remove command was leaving behind artifacts which was inhibiting the re-installation of the Satellite. These artifacts are now removed, and customers can now re-install as expected. (BZ#1311313)
• Navigating across plug-ins caused an error in the web UI. The navigation has been fixed. (BZ#1311739)
• Certain API calls were allowing users to cross organization boundaries. These calls will now respect the organizational roles. (BZ#1342665)
• Satellite 6.2 did not include the 'ovirt_provision_plugin' to connect with RHEV. This package is now included. (BZ#1343927)
• Deleting a host did not clean up all the subscriptions associated with that host, which was blocking the delete. This subscription data is now cleaned up correctly. (BZ#1344053)
• The installation process was failing to create keys if the /var/lib/puppet/ssl directory was deleted. The installer has been fixed to handle this case. (BZ#1347228)
• Orchestration tasks which should only occur if provisioning was successful were being executed during a process which failed. The exception handling has been improved to not call these orchestration tasks if a provisioning process fails. (BZ#1347992)
• Docker tags were not handled correctly when re-syncing from the Docker Repository. These tags are processed correctly now. (BZ#1349980)
• When a repository sync process was started on the command line and when attempting to start another sync via the web UI, the request failed. With this update, checks are included for existing running sync processes. Duplicate requests no longer result in an error and the progress is correctly reported in the web UI. (BZ#1351103)
• Satellite 6.2 was not calling NSS correctly for DNS updates. The correct number of parameters are now provided. (BZ#1359125)
• Hammer was not requesting the organization ID parameter correctly with certain commands. (BZ#1359665)
• Hammer did not allow users to specify a list of organizations to a host group. This feature has been added. (BZ#1359694)
• The performance of upgrades has been improved on networked file systems. (BZ#1362135)
• The Puppet reports page was not accessible due to an internal server error. The error is now handled correctly and the page can be viewed. (BZ#1364049)

Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To update this system to include these fixes, ensure your system has access to the latest Red Hat packages. For instructions on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Then re-run the installer to complete the upgrade:

# satellite-installer --scenario satellite --upgrade

or

# satellite-installer --scenario capsule --upgrade

Affected Products

• Red Hat Satellite 6.2 for RHEL 7 x86_64
• Red Hat Satellite 6.2 for RHEL 6 x86_64
• Red Hat Satellite Capsule 6.2 for RHEL 7 x86_64
• Red Hat Satellite Capsule 6.2 for RHEL 6 x86_64

Fixes

• BZ - 1311313 - katello-restore fails returned 1: unable to load Private Key
• BZ - 1311739 - visiting Content -> Puppet Modules and then a modules Content Views page gives error
• BZ - 1342665 - CVE-2016-4475 - API and UI org/locations actions not limited to user's associated orgs/locations
• BZ - 1343927 - ovirt_provision_plugin not in satellite channel
• BZ - 1344053 - Refresh pools doesn't delete Stack Derived Pools
• BZ - 1347228 - Installer fails to create puppet keys
• BZ - 1347992 - Rollback during discovered host provisioning errors with ERF42-8175 and causes post_commit orchestration
• BZ - 1351103 - 'NameError' while syncing imported rhel repo in importing satellite
• BZ - 1359125 - Smart Proxy DNS nsupdate GSS fails
• BZ - 1359665 - Content-view filter and content-view update cmds should not requires --organization-id or --organization option
• BZ - 1359694 - Hostgroup create/update doesn't allow to set list of organizations
• BZ - 1364049 - Puppet report page shows error

CVEs

• CVE-2016-4475

References

• http://www.redhat.com/security/updates/classification/#normal