RHBA-2016:2712 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
OpenStack Platform 8.0 (Liberty) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building a private
or public infrastructure-as-a-service (IaaS) cloud running on commonly
available physical hardware.

Changes to the python-oslo-concurrency component:

• qemu-img calls were unrestricted by ulimit. This caused a security vulnerability (CVE-2015-5162) in Nova. The new minor version of oslo.concurrency adds support for process limits ('prlimit'), which patches the security vulnerability. (BZ#1349515)

Changes to the python-oslo-messaging component:

• A race condition prevented 'neutron-server' from stopping on the Overcloud. This caused a slow restart of the 'haproxy' resource. This bug fix corrects the race condition and provides resources with quicker and safer restarts. (BZ#1295692)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 8 runs on Red Hat Enterprise Linux 7.2.

The Red Hat OpenStack Platform 8 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 8, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/version-8/release-notes/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 8 x86_64

Fixes

• BZ - 1295692 - neutron-server service sometimes fail to stop in HA env due to timeout
• BZ - 1331669 - beam.smp 500% cpu usage + coredump
• BZ - 1339224 - RabbitMQ logs are not rotated properly
• BZ - 1347331 - rhel_hdp_hadoop_2_image_name should be rhel-6_8-64-hdp-2-0 or rhel-6-64-hdp-2-0.
• BZ - 1349515 - Update oslo.concurrency to 2.6.1
• BZ - 1357918 - Alarm ignores repeat_actions field
• BZ - 1358099 - novncproxy: directory listing on :6080/include/
• BZ - 1359887 - jsonpath_rw dep is missing
• BZ - 1371521 - RabbitMQ logs are not rotated properly

CVEs

(none)

References

(none)