- Issued:
- 2017-09-13
- Updated:
- 2017-09-13
RHBA-2017:2721 - Bug Fix Advisory
Synopsis
Red Hat OpenStack Platform 11.0 director Bug Fix Advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 11.0 (Ocata) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:
Changes to the puppet-horizon component:
- Some binary python modules used by Horizon were compiled with a flag that makes them use the simplified GIL state API. Since mod_wsgi uses sub-interpreters, and the simplified GIL state API is not re-entrant, this results in the mod_wsgi locking up and hanging, making the dashboard unavailable.
Added "WSGIApplicationGroup %{GLOBAL}" to mod_wsgi configuration, which forces it to always use the main interpreter instead of sub-interpreters. With that option, mod_wsgi works correctly no matter what options were used to compile the binary python modules. The slight performance penalty is not noticeable. (BZ#1478870)
Changes to the puppet-tripleo component:
- In Highly Available IPv6 deployments, virtual IPs used for RabbitMQ may move between controller hosts during an upgrade. A bug in the creation of these IPv6 IPs causes them to be used as source addresses for RabbitMQ's connections. As a result, RabbitMQ will crash and may be unable to automatically recover its cluster.
To return to normal operation, restart RabbitMQ on the affected controller hosts, as well as any services which depend on RabbitMQ and do not automatically reconnect. (BZ#1445905)
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 11 runs on Red Hat Enterprise Linux 7.4.
The Red Hat OpenStack Platform 11 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 11, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack 11 x86_64
Fixes
- BZ - 1425821 - Parameter descriptions are missing from the collectd-environment.yaml
- BZ - 1443652 - Swift ringbuilding logic coupled to Controller/ObjectStorage roles
- BZ - 1445905 - On IPv6 deployments the VIP is configured as /64 and can be used as source address by services on the node
- BZ - 1448646 - Deployment of composable role of rabbitmq on remotes pacemaker nodes fails on "Could not evaluate: backup_cib"
- BZ - 1454634 - SRIOV upgrade OSP10(ovs2.5/ovs2.6) to OSP11 failed when PF assign to instance
- BZ - 1461242 - Running nova-manage per the instructions for ironic in the overcloud isn't working as expected.
- BZ - 1472340 - Update may fail with error: /lib64/libnsssysinit.so: undefined symbol: PR_GetEnvSecure during yum upgrade.
- BZ - 1472928 - On pacemaker remote node stonith is set unconditionally
- BZ - 1476762 - keystone-manage token_flush cron job fails with: expr: division by zero sleep: missing operand
- BZ - 1478870 - Horizon won't load with OSP11 - Script timed out before returning headers: django.wsgi
- BZ - 1479368 - FC connector logs number of attempts incorrectly
- BZ - 1479540 - Rebase puppet-ceph to e72b6f3
- BZ - 1481435 - Rebase openstack-tripleo-puppet-elements to 1520a18
- BZ - 1481444 - Rebase os-net-config to 914635c
- BZ - 1481750 - Rebase python-tripleoclient to 8dbebd4
- BZ - 1481852 - Rebase puppet-neutron to 0472730
- BZ - 1481854 - Rebase openstack-tripleo-heat-templates to eeaa235
- BZ - 1481866 - Rebase puppet-nova to d735866
- BZ - 1481868 - Rebase puppet-tripleo to fd9fbf0
- BZ - 1483109 - Rebase openstack-tripleo-common to c535ca4
- BZ - 1483729 - Rebase openstack-tripleo-heat-templates-compat to 5.3.0-4
- BZ - 1485452 - SR-IOV VF count is not set immediately on deployment
CVEs
(none)
References
(none)
Red Hat OpenStack 11
SRPM | |
---|---|
openstack-tripleo-common-6.1.0-3.el7ost.src.rpm | SHA-256: c72d0bfeb0bb25f7bf20c9f3dc46174cfa34dfc116d48d8c2b9bb78561f17beb |
openstack-tripleo-heat-templates-6.2.0-3.el7ost.src.rpm | SHA-256: 8569c24e3688a75c485f624cd4f7e506cbfe5dee186b79aefdc8b7502f3f6571 |
openstack-tripleo-heat-templates-compat-5.3.0-4.el7ost.src.rpm | SHA-256: b2566cb797399020e48876bdcd48fa368ad8f8aff0e19c216778c6833056a5fd |
openstack-tripleo-puppet-elements-6.2.0-1.el7ost.src.rpm | SHA-256: 615e57b90b9425a33f8b473b44cad0ce7d21e3074f3c662f4235dcc98928c850 |
os-net-config-6.1.0-2.el7ost.src.rpm | SHA-256: 70398ff991ade86d1bfaac099a91218230e0b974e45c8dd477d2708380d9321e |
puppet-ceph-2.3.0-7.el7ost.src.rpm | SHA-256: f0921789b5e730db12909489c2bf5fb2432b4346a7cc05dd5a9565a327681bc5 |
puppet-horizon-10.3.1-2.el7ost.src.rpm | SHA-256: 0bd17dcc34c474eca9b18afe11be1bc0485eca9eeefe23694b32c5bd7613c7f6 |
puppet-neutron-10.3.1-2.el7ost.src.rpm | SHA-256: 38a8fe5b8602fa92bda230fb7797fbbf37f5d60806e1e12cb68439d19762900b |
puppet-nova-10.4.1-2.el7ost.src.rpm | SHA-256: ff61e49a4f591e5f6b041b1a1eb3fd8e1bcaa7efd2532230faca6ebc7aefbd7a |
puppet-tripleo-6.5.0-8.el7ost.src.rpm | SHA-256: e5ccdc443d4d69c4915ef220b8d0f1653147f516409a8cf9db4e820663f3ccc1 |
python-os-brick-1.11.0-3.el7ost.src.rpm | SHA-256: 9e80aa7b3f983dc683c87d94f6704b3576ed12832dbcd43320676adc9f77c4d8 |
python-tripleoclient-6.2.0-2.el7ost.src.rpm | SHA-256: c83e37a10d40f15ed3e0d2c9d6746c08ceae51d5f35a6e4402c8c23d906b8692 |
x86_64 | |
openstack-tripleo-common-6.1.0-3.el7ost.noarch.rpm | SHA-256: 6d5be2e78798d08075418c31fe47dc8bc3f951164057628ceef61e73507957d6 |
openstack-tripleo-heat-templates-6.2.0-3.el7ost.noarch.rpm | SHA-256: 931c765f18f27d7913b2d68a75a38b28c32ce21d63a794810a61560c91186f22 |
openstack-tripleo-heat-templates-compat-5.3.0-4.el7ost.noarch.rpm | SHA-256: 131fdb9fbdb41107887b1bc02cb0959c5f84f7b33e387c23b69fb3be1eb02d49 |
openstack-tripleo-puppet-elements-6.2.0-1.el7ost.noarch.rpm | SHA-256: e2e6b03edd6d6daf96bdd07b38f03aaa5e2c444ee57acefce2ea4de5c191b34d |
os-net-config-6.1.0-2.el7ost.noarch.rpm | SHA-256: 15b7f5025c29f6ed27ed40ecc38bc8decb33ad9aa8470c4b17964452a7e912cb |
puppet-ceph-2.3.0-7.el7ost.noarch.rpm | SHA-256: d96909733119f1b26d1313edf22d3b090f54baf21fbd984f72a891bcd9f796f9 |
puppet-horizon-10.3.1-2.el7ost.noarch.rpm | SHA-256: 175832dee9c71e3a4d0deeed375932d340f7a5e327f7e6b2d6233c72b697130f |
puppet-neutron-10.3.1-2.el7ost.noarch.rpm | SHA-256: 685e0ca3da592f3f61094864b20692260933f880b6ea88351e2a699ffcb1d716 |
puppet-nova-10.4.1-2.el7ost.noarch.rpm | SHA-256: 1046bb27fae473e0fd5232aea3668978571b9067e98301891a818cbf937634e3 |
puppet-tripleo-6.5.0-8.el7ost.noarch.rpm | SHA-256: 6da2190472580599ab11fa34f5e6450ef946b9d2b25d723ff54c5cdc82bdde2c |
python-os-brick-1.11.0-3.el7ost.noarch.rpm | SHA-256: c8fe4a038a53f9f3bbcf88b6943b3f87753c69fd41dcac9d7d0d49bac4d1e2fd |
python-tripleoclient-6.2.0-2.el7ost.noarch.rpm | SHA-256: 1debd877e1595d6c3e50961d4a9026fda50e99897d537e1125dd85892107ebd7 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.