RHBA-2016:1885 - Bug Fix Advisory

Topic

Updated Satellite 6.2 packages that fix several bugs are now available.

Description

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.

This update adds the following features:

• Satellite 6.2.2 adds additional tooling around bulk subscription management via the user interface and command line. (BZ#1188796, BZ#1267313, BZ#1296978, BZ#1316703, BZ#1366437)
• The discovery plug-in is now enabled by default at install time. (BZ#1318538)
• Satellite 6.2.2. allows users to search job invocations based on the host that is affected. (BZ#1331660)
• Multiple subscriptions of the same type can now be assigned to the same activation key. (BZ#1343067)
• The maximum core and memory limits have been increased. (BZ#1368450)

This update fixes the following bugs:

• Several bugs around upgrading from 6.1 have been resolved. (BZ#1336365, BZ#1361785, BZ#1364778, BZ#1365299)
• The performance and actions of content view promotion have been improved. (BZ#1161643, BZ#1231369, BZ#1275183, BZ#1117753, BZ#1185838)
• Hosts provisioned in a distinct domain from an IDM server could not be registered. The correct options were added to the provisioning templates to allow this to work. (BZ#1209838)
• Several foreman-debug bugs have been fixed. (BZ#1370224, BZ#1274694)
• The admin role could not be assigned to a user group via hammer. This role can now be assigned. (BZ#1281300)
• When integrated with IPA, Satellite did not return an error when hammer was used to update a host. The calls to IPA are now encoded correctly. (BZ#1281687)
• Parameter value processing caused errors in Puppet because of faulty YAML. The parameter system has been enhanced in order to handle additional cases. (BZ#1315282, BZ#1332625)
• The host collection API was not utilizing the host_id fields. The API has been enhanced with this data. (BZ#1325989)
• The main sync page threw errors upon completion of sync if Capsules were non-responsive. The Capsule communication checking has been improved. (BZ#1326038, BZ#1327292)
• Publishing or promoting a Puppet content view failed with an obtuse error. The publishing process has been updated to avoid this error. (BZ#1332596)
• The katello-remove-orphan job was producing error messages incorrectly which corrupted the emails which were sent. This no longer occurs. (BZ#1334650)
• An unused Puppet class counter was causing database locks. This counter has been removed. (BZ#1336007)
• Re-Registering host with uppercase host name errors 'Name has already been taken'. The look-up logic will now not take case into consideration. (BZ#1361309)
• Custom products, when imported, were not creating subscriptions correctly. The subscriptions are now created and associated properly. (BZ#1362194)
• Network interface names could include JavaScript resulting in a XSS exploit. This possibility has been removed. (BZ#1364235)
• Satellite was misspelled in the installer usage message. The typo has been fixed. (BZ#1364900)
• Derived pools for VDC subscriptions were not showing the correct content. The correct repositories are now shown. (BZ#1366327)

Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To update this system to include these fixes, ensure your system has access to the latest Red Hat packages. For instructions on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Then re-run the installer to complete the upgrade:

# satellite-installer --scenario satellite --upgrade

or

# satellite-installer --scenario capsule --upgrade

Affected Products

• Red Hat Satellite 6.2 for RHEL 7 x86_64
• Red Hat Satellite 6.2 for RHEL 6 x86_64
• Red Hat Satellite Capsule 6.2 for RHEL 7 x86_64
• Red Hat Satellite Capsule 6.2 for RHEL 6 x86_64

Fixes

• BZ - 1117753 - CV:Deleting a CV immediately after removing its published version raises 500 ISE
• BZ - 1161643 - Content View Publish takes longer than anticipated
• BZ - 1185838 - Content View Puppet repo not deleted from puppet master
• BZ - 1188796 - [RFE] option to selectively attach required subscriptions to multiple content hosts via Satellite WebUI
• BZ - 1231369 - Slow UI Response Time on Content View Page viewing published versions
• BZ - 1275183 - Timeout in errata calculation with multiple concurrent ContentViews containing RedHat repos and Date Filter
• BZ - 1281687 - hammer host update on realm fails with error ERROR -- : "\x82" from ASCII-8BIT to UTF-8
• BZ - 1316703 - [RFE] As a UI user i like to select hosts to attach subscriptions
• BZ - 1318538 - smart_proxy_discovery and hammer_cli_foreman_discovery packages should be installed default with installer
• BZ - 1325989 - GET/POST/PUT /api/v2/host_collections/ do not return 'host_ids' attribute
• BZ - 1327292 - Main sync page throws error/warning upon completion of sync if capsules non-responsive
• BZ - 1331660 - RFE: add ability to find all jobs that were run against a particular host.
• BZ - 1332596 - Publishing or Promoting a Puppet Content View fails with "Validation failed: Merge overrides can only be set for array or hash, Avoid duplicates can only be set for arrays that have merge_overrides set to true"
• BZ - 1332625 - [RFE] Allow array setting merging
• BZ - 1334650 - Cron weekly katello-remove-orphans warnings sending mail
• BZ - 1336007 - Postgresql ShareLock problems while configuring puppet concurrently
• BZ - 1336365 - Satellite 6.2 beta - httpd fails to start after being updated
• BZ - 1336716 - Unable to remove host collection from activation key via hammer
• BZ - 1361309 - Re-Registering host with uppercase hostname errors 'Name has already been taken'
• BZ - 1362194 - No proper subscriptions created for custom products
• BZ - 1365299 - After upgrade "undefined method `name' for nil:NilClass" when visiting dashboard (oscap widget)
• BZ - 1366327 - VDC subscription does not provide/show any product content
• BZ - 1370224 - foreman-debug does not properly collect foreman-tasks export
• BZ - 1372436 - Login page should display Version Satellite 6.2.2
• BZ - 1372475 - Unable to sync content to capsule
• BZ - 1372482 - Upgrade from 6.2.1 to 6.2.2 error: NoMethodError: undefined method `redhat?'

CVEs

• CVE-2016-6320

References

• http://www.redhat.com/security/updates/classification/#normal