RHBA-2016:1866 - Bug Fix Advisory

Topic

Updated spacewalk-utils, spacewalk-java, spacewalk-schema, spacewalk-backend packages that fix four bugs are now available for Red Hat Satellite 5.6.

Description

Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool.

This update fixes the following bugs:

• When using the "kickstart.profile.setAdvancedOptions()" and "kickstart.profile.setKickstartTree()" API calls, the kickstart profile was set correctly in Satellite but not in cobbler. This erratum fixes this issue and keeps the cobbler profile up to date. (BZ#1349403)
• Previously, CVE names in Satellite 5.6 were limited to 13 characters, which is not always enough. By applying this erratum, CVE name length becomes 20 characters long. (BZ#1365913)
• Previously, generating spacewalk-debug did not include the '/usr/share/rhn/config-defaults/' directory. This advisory provides a fix that adds this directory to spacewalk-debug. (BZ#1141931)
• Specifying --org <org-id> for spacewalk-export failed to export system-profiles. This update fixes this issue. (BZ#1150697)
• Prior to this update, accessing invalid Satellite URLs led to "Internal Server Error". Consequently, the tomcat log file was filled with traceback messages. This bug has been fixed and the aforementioned error no longer occurs when accessing invalid URLs. (BZ#1306630)

Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.

Solution

Application of this errata involves updating the database schema.

For general instructions on the database schema upgrade, consult the following document first: https://access.redhat.com/site/articles/273633

Before applying this update, make sure all previously-released errata relevant to your system have been applied. To apply this erratum, take the following steps:

• Shut down Red Hat Satellite by running the following command as root:

rhn-satellite stop

• Backup the database. For embedded or managed database variants, please consult Red Hat Satellite 5.6 documentation. For an external database, consult your database administrator.
• Upgrade the errata packages. Details on how to apply this update are available at https://access.redhat.com/site/articles/11258
• Update the database schema using the spacewalk-schema-upgrade command. To do so, run as root:

spacewalk-schema-upgrade

This process will update your database schema to the latest version. The spacewalk-schema-upgrade command will inform you about the results of the upgrade and exact locations of schema upgrade log files.

• Restart Red Hat Satellite by running the following as root:

rhn-satellite start

Affected Products

• Red Hat Satellite 5.6 for RHEL 6 x86_64
• Red Hat Satellite 5.6 for RHEL 6 s390x
• Red Hat Satellite 5.6 for RHEL 5 x86_64

Fixes

• BZ - 1150697 - Satellite5.6: spacewalk-export --org fails for system-profile
• BZ - 1306630 - Satellite 5.6: Qualys unauthenticated security scan leads to NullPointer exceptions. This exception should be threaten it the source code
• BZ - 1349403 - Satellite5.6: kickstart.profile.setKickstartTree API call does not update cobbler profile
• BZ - 1365913 - Satellite5.6: support more than 13 chars for CVE names

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal