RHBA-2017:1587 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
OpenStack Platform 10.0 (Newton) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the python-osc-lib component:

• When the openstack client ran in debug or verbose mode, the user password was displayed as plain text in the output. The problem has been fixed using the oslo password masking utility. As a result, user passwords are not displayed in plain text any more.

Changes to the python-oslo-messaging component:

• A race condition on RPC message acknowledgement in Oslo Messaging caused random RPC timeout in Ceilometer. The problem has been fixed. Now, the message acknowledgement is thread-safe and causes no Ceilometer related timeouts.

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.3.

The Red Hat OpenStack Platform 10 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 10, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat OpenStack 10 x86_64

Fixes

• BZ - 1383775 - Redis service fails to start due to selinux denials
• BZ - 1390634 - OSPD 10 + OVS DPDK two ports (bidirectional) performance tests
• BZ - 1391571 - Debug and -vv outputs user password in plain text
• BZ - 1393473 - No error when I try to delete a plan that's still deployed
• BZ - 1398283 - Nodes that are assigned to custom roles are "Not Assigned" in other plans
• BZ - 1403819 - Failed to update resource's attributes
• BZ - 1403828 - Failed to specify attribute of 'number' type for custom resource type
• BZ - 1413751 - Invalid Accept HTTP header generated during ECP flow
• BZ - 1416088 - Rebase openvswitch to 2.6 in OSP 10
• BZ - 1416307 - neutron-openvswitch-agent won't create ovs flows upon restart
• BZ - 1418957 - Need support for "dpdkvhostuserclient" type in ifup-ovs script
• BZ - 1420134 - Selinux is preventing neutron-openvswitch-agent from starting properly
• BZ - 1420884 - Ironic iDRAC driver WSMAN enumerate fails to return all entries - OSP 10
• BZ - 1423593 - RabbitMQ: Bad address when CONFIG_AMQP_ENABLE_SSL=y
• BZ - 1428005 - iDRAC get/set power state fails
• BZ - 1430537 - Rebase openstack-aodh to 3.0.2
• BZ - 1431219 - Rebase openstack-designate to 3.0.1
• BZ - 1431245 - Rebase openstack-gnocchi to stable/3.0 hash cb650e3
• BZ - 1431770 - Rebase openstack-ec2-api to 3.0.3
• BZ - 1431836 - Rebase openstack-manila-ui to upstream/stable/newton hash 602dd51
• BZ - 1432464 - Rebase python-keystoneauth1 to 2.12.3
• BZ - 1434849 - Tempest does not properly initialize the configuration values from tempest.conf for some plugins
• BZ - 1443397 - Backport the '--remove' option for tempestconf
• BZ - 1448189 - Rebase openshift-heat-templates to 0.9.9
• BZ - 1452422 - Rebase openstack-designate to 6a5665
• BZ - 1452619 - Rebase openstack-gnocchi to 3.0.6
• BZ - 1452637 - Rebase openstack-manila-ui to 4ae1bc
• BZ - 1452872 - Rebase openstack-tempest to 79cf31
• BZ - 1454289 - Rebase openstack-tripleo-ui to 1.2.0
• BZ - 1454388 - [SELinux] security_bounded_transition error

CVEs

(none)

References

(none)