RHBA-2017:2083 - Bug Fix Advisory

Topic

An update for python-rhsm and subscription-manager is now available for Red Hat Enterprise Linux 7.

Description

The python-rhsm packages provide a library for communicating with the representational state transfer (REST) interface of a Red Hat Unified Entitlement Platform. The Subscription Management tools use this interface to manage system entitlements, certificates, and access to content.

The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the Red Hat entitlement platform.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.

Users of python-rhsm and subscription-manager are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1094932 - subscription-manager: script and/or trigger should not directly enable systemd units
• BZ - 1245473 - Change the message when yum update fails within the container on a system with no subscriptions
• BZ - 1259768 - The RHSM addon should report background processing is ongoing and prevent early exit from Initial Setup until done
• BZ - 1261215 - registergui progress bars pause after registration.
• BZ - 1268033 - After clicking apply in register on 'choose server', the ui blocks pinging the server
• BZ - 1304074 - [RFE] Provide a D-Bus API for Registering a system
• BZ - 1306005 - subscription-manager repos --list with bad proxy options is silently using cache
• BZ - 1320371 - Failed to list available pools as RateLimitExceededException
• BZ - 1323271 - It could be great to update status of product subscriptions after an action "update facts"
• BZ - 1331739 - subscription-manager repo-override --remove= (with an empty string) --repo=<id> behaves like --remove-all
• BZ - 1346368 - man rhsm.conf is missing a description for the server_timeout configuration
• BZ - 1357152 - Start/End dates on subscription-manager list --installed are immediately blank after a productid is first installed
• BZ - 1360427 - RPM of sub-man-gui does not depend on any web browser
• BZ - 1362731 - The attaching title is registering when register with activationkey
• BZ - 1366523 - GUI: contract selection dialogue doesnot let you change the quantity of the subscription
• BZ - 1367126 - [RFE] upload FQDN with facts
• BZ - 1369577 - when calling rct cat-manifest --no-content, substitute an empty line in place of the Content Sets:
• BZ - 1370623 - subscription-manager-gui Manage repositories not sorting
• BZ - 1371202 - Subscription Attachment dialog does not stretch the subscription table vertically
• BZ - 1371632 - Connection test passed even fields are blank in proxy dialog
• BZ - 1372779 - another typo in "Proxy connnection failed, please check your settings."
• BZ - 1373922 - Need man page entry for "--no-content" under "THE CAT-MANIFEST COMMAND" section "OPTIONS"
• BZ - 1374389 - bash-completion for "rct stat-cert --<TAB><TAB>" should NOT show --no-content as an option
• BZ - 1376014 - GUI: Register with auto-attach option doesnot attach subscriptions
• BZ - 1378495 - [RFE] Do not change OStree origin refspec
• BZ - 1379258 - Notice icon is located improperly in registration window.
• BZ - 1382897 - The register button is still enabled when has been registered
• BZ - 1388207 - [RFE] rct cat-manifest command should show derived products
• BZ - 1393010 - [RFE] Log the candlepin request ID with the request response
• BZ - 1401394 - Mismatch in the 'fqdn' fact on a machine which has differing ipv4 and ipv6 dns entries
• BZ - 1415708 - upgrade to latest rhsm version sets the fact "virt.is_guest" to unknown
• BZ - 1418119 - [RFE] Implement Org / Environment level content access
• BZ - 1420533 - no_proxy environment variable is ignored by the rhsmd process
• BZ - 1423013 - Can't make a dbus method call to the com.redhat.RHSM1.RegisterServer Start method until /etc/dbus-1/system.conf is edited
• BZ - 1424614 - [RFE] Enhance the 'rct cat-manifest' command to show manifests with the Organization/Environment Content Access Flag
• BZ - 1425438 - subscription-manager list --consumed shows the consumption of extra entitlement granted from the organization or environment.
• BZ - 1425922 - [RFE] Get system locale setting into cp_consumer_facts
• BZ - 1426343 - Unable to rct cc candlepin-ca.pem using latest subscription-manager build from jenkins
• BZ - 1426357 - RegisterWithActivationKeys method on dbus from com.redhat.RHSM1.Register interface fails with no keys exist for this org
• BZ - 1427069 - subscription-manager client should give priority to the repo overrides set in normal subscriptions when they are attached in "content access" mode.
• BZ - 1427901 - Rebase subscription-manager component to the latest upstream branch for RHEL 7.4
• BZ - 1428002 - [RFE] man page documentation is needed to describe policy for honoring environment vars HTTP_PROXY, HTTPS_PROXY, NO_PROXY
• BZ - 1429505 - Facts dbus service does not start properly due to timeout
• BZ - 1429657 - subscription-manager unregisters before registering with --force
• BZ - 1431659 - systemctl stop rhsmcertd leaves /var/run/rhsm/cert.pid behind
• BZ - 1432231 - rhn-migrate-classic-to-rhsm is failing to stop and disable services
• BZ - 1432947 - GUI: AttributeError: 'NoneType' object has no attribute 'id' when tried to list all available subscription from gui against a golden ticket enabled org
• BZ - 1432990 - registration failure message due an empty/corrupt cert in /etc/rhsm/ca folder is not appropriate
• BZ - 1433368 - subscription-manager still shows the golden ticket subscription under the "My subscriptions" tab
• BZ - 1433479 - rhsmcertd-worker should check connection before locking
• BZ - 1434094 - com.redhat.RHSM1.Config.Set is accessible by non-root users
• BZ - 1434860 - A series of x-Correlation-ID is created when tried to execute any subscription-manager command
• BZ - 1435013 - [RFE] Randomize and/or Distribute the execution of rhsmcertd over a large Satellite 6 Deployment
• BZ - 1435771 - RHSM1DBusException: com.redhat.RHSM1.Error: UnboundLocalError: local variable 'data' referenced before assignment
• BZ - 1436344 - m2crypto-0.21.1.pulp-13.el7sat with python-rhsm-1.17.9-1.el7 results in subscription-manager:3997:MainThread @managercli.py:175 - __init__() got an unexpected keyword argument 'family'
• BZ - 1436441 - subscription-manager-migration-data for RHEL7.4 needs RHEL7.4 product certs (not RHEL7.3 certs)
• BZ - 1438085 - fact collection behavior of 'virt.uuid' has changed for 'virt.host_type's containing {"ibm_systemz","powervm"}
• BZ - 1438139 - The Subscription Details table in All Available Subscriptions Tab is too small to show the details
• BZ - 1438552 - release --list with proxy throws AttributeError: 'ContentConnection' object has no attribute 'proxy_host'
• BZ - 1438561 - DBusException: org.freedesktop.DBus.Error.NoReply: Message did not receive a reply (timeout by message bus)
• BZ - 1438869 - No SMBIOS nor DMI entry point found, sorry.
• BZ - 1440251 - Building of rhsmcertd is broken at RHEL
• BZ - 1440319 - typo in the word "Specifes" in subscription-manager man page
• BZ - 1440922 - rhsm.conf man page needs an update for new [rhsmcertd] maxSplayMinutes
• BZ - 1440934 - rhsmcertd is not starting the Auto-attach interval
• BZ - 1441397 - bash completion for all subscription-manager modules is failing to present the new "--noproxy" option
• BZ - 1441698 - Missing rpm dependency to urw-fonts
• BZ - 1441739 - Zanata translations for subscription-manager 1.19 are not 100%
• BZ - 1443101 - register --force option , doesnot actually re-register when provided with --serverurl option
• BZ - 1443159 - the default value for rhsmcertd splay configuration is not recognized by the config module
• BZ - 1443164 - no_proxy does not match the host name when *.redhat.com is used
• BZ - 1443205 - improve splay messages in rhsmcertd.log
• BZ - 1443215 - unable to open ATI��US��1�H��` to write timestamp: Permission denied
• BZ - 1443554 - Subscription Manager GUI can't open Getting started at RHEL 7
• BZ - 1443693 - failing to override "system.certificate_version" with a custom fact
• BZ - 1444714 - Error reading system DMI information: coercing to Unicode: need string or buffer, NoneType found
• BZ - 1444800 - DBus can not activate service com.redhat.SubscriptionManager
• BZ - 1445204 - 'Next System Certificate Check' and 'Next System Auto Attach' in About window are not accurate.
• BZ - 1445387 - setting LC_ALL=C locale breaks subscription-manager CLI
• BZ - 1446469 - unable to rct cc entitlement cert
• BZ - 1447211 - Unable to read cache: /var/lib/rhsm/cache/written_overrides.json
• BZ - 1447722 - rhsmcertd-worker: Error reading networking information: [Errno 13] Permission denied
• BZ - 1448855 - golden ticket entitlement is not removed when you set contentAccessMode to " " back from "org_environment"
• BZ - 1449667 - Msgfmt error in de, es, unlocalized strings in fr, it, ja, ko, pt_BR, ru, zh_CN, zh_TW
• BZ - 1449824 - facts collection can abort with unknown locale
• BZ - 1450049 - subscription-manager rhn-migrate-classic-to-rhsm:`_rhn-migrate-classic-to-rhsm': not a valid identifier
• BZ - 1450210 - the collection of fact keys and values should be independent of the system locale
• BZ - 1450818 - Any local user can open a popup window with subscription status
• BZ - 1450862 - Two golden ticket subscriptions attached on single system when system was not unregistered properly
• BZ - 1451003 - subscription-manager identity reports redundant UUID info in the name field
• BZ - 1451166 - Incorrect "Host" header when connecting through a http proxy
• BZ - 1452075 - register --force option when provided with --serverurl option throws [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:579)
• BZ - 1452737 - GUI: New "Bypass the HTTP proxy for specific hosts/domains" option in proxy configuration window is not saving the value for no_proxy parameter in rhsm.conf
• BZ - 1457197 - --noproxy option no longer match "*" for host names
• BZ - 1463765 - fixes needed for a few pofilter test failures after pulling in new translations for rhel7.4

CVEs

(none)

References

• https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html