RHBA-2017:3445 - Bug Fix Advisory

Topic

Updated cobbler, nutch, satellite-schema, spacecmd, spacewalk-backend, spacewalk-java and spacewalk-schema packages that fix several bugs and add various enhancements are now available for Red Hat Satellite 5.8.0.

Description

Red Hat Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package deployment of their servers. It allows organizations to utilize the benefits of Red Hat Network (RHN) without having to provide public Internet access to their servers or other client systems. Red Hat Satellite 5.8.0 can be upgraded to from earlier releases.

Bug fixes:

• After updating Satellite to 5.6, the "cobbler system getks" command for systems added by cobbler failed. This is now fixed. (BZ#1178515)
• Conditional restart of logrotate by cobblerd sometimes failed. The logrotate config file for cobblerd has been modified to make this process more robust. (BZ#1314379)
• When making multiple calls to the channel.software.mergePackages API to clone channels, the first repodata request was processed but others where purged. Consequently, sometimes no repodata was created. Additional repodata requests for the channel being cloned are no longer purged. (BZ#1320469)
• After applying errata RHBA-2016:1645, calling the spacecmd command directly from the system shell to apply custom values with spaces did not work as expected. With this update, custom values with spaces works as expected. (BZ#1373378)
• During satellite-sync, the database sometimes reported deadlocks which aborted the synchronization. The database lock code has been improved. (BZ#1445415, BZ#1452362)
• Previously, using spacewalk-repo-sync with repository URL option and omitting the protocol caused "list index out of range" to be logged. The error message now reads "Unknown protocol in repo URL". (BZ#1450445)
• Previously, API call schedule.failSystemAction did not check the action ID was valid. An invalid ID caused the process to fail and "unhandled internal exception: null" was logged. The validity is now checked. (BZ#1455880)
• When changing the base channel for multiple hosts, the system.setBaseChannel() function sometimes deadlocked. The database lock code has been improved. (BZ#1469744)
• Previously, a command scheduled remotely could be removed in the Satellite web UI, but this does not cancel the action. With this update, when attempting to forcibly disable a remotely scheduled action in the web UI, a confirmation dialogue with warning is displayed. If the change is confirmed, the action is marked as failed. (BZ#1471018)
• Adding a system that had snapshots enabled to a system group sometimes became deadlocked. The database lock code has been improved. (BZ#1481848)
• Previously, JAVA core dumps were written to "/usr/sbin". With this update, they are disabled if you run the "spacewalk-setup-tomcat" script. (BZ#1483503)
• Previously, the command "rhn-satellite-activate --manifest-info" showed the latest manifest even if activation had failed. With this update, only the last successfully activated manifest is shown. (BZ#1486285)
• Canceling a scheduled event does not work if the event is a child of a patent task. Previously, only an internal server error was written to "/var/log/tomcat6/calaina.out". The usability of the web UI has been improved. (BZ#1492572)
• Previously, API call channel.software.mergeErrata deleted errata from the source channel if it also existed in the destination channel. Errata are now correctly merged. (BZ#1493143)
• Various improvements to EUS subscription logic have been made. (BZ#1494575, BZ#1505985)
• On a system with a large PostgreSQL database with many cloned channels, the Errata clone page was slow to load. The code has been improved and the clone page loads within a few seconds. (BZ#1504975)

Enhancements:

• This update adds the option --quiet, -q for softwarechannel_sync in spacecmd, which prevents output to "logging.debug" when channels are equal. (BZ#1367562)
• You can now search in the Satellite web UI for software channel entitlements using the label instead of the name. (BZ#1489564)

Solution

Application of this errata involves updating the database schema.

Before applying this update, make sure all previously-released errata relevant
to your system have been applied. To apply this erratum, take the following
steps:

• Shut down Red Hat Satellite by running the following command as root:

rhn-satellite stop

• Backup the database. For embedded or managed database variants, please consult

Red Hat Satellite 5.8 documentation. For an external database, consult your
database administrator.

• Upgrade the errata packages. Details on how to apply this update are available

at https://access.redhat.com/site/articles/11258

• Update the database schema using the spacewalk-schema-upgrade command. To do

so, run as root:

spacewalk-schema-upgrade

This process will update your database schema to the latest version. The
spacewalk-schema-upgrade command will inform you about the results of the
upgrade and exact locations of schema upgrade log files.

• Restart Red Hat Satellite by running the following as root:

rhn-satellite start

Affected Products

• Red Hat Satellite 5.8 x86_64
• Red Hat Satellite 5.8 s390x

Fixes

• BZ - 1314379 - The cobblerd logrotate config file can completely disable the whole logrotate system.
• BZ - 1320469 - Bug: API "channel.software.mergePackages" does not create a repodata if a clone channel is created using the API
• BZ - 1373378 - Applying errata RHBA-2016:1645 causing different behaviour of applying custom values on systems
• BZ - 1445415 - satellite sync deadlock linking packages to channels
• BZ - 1450445 - spacewalk-repo-sync doesn't check protocol in prefix of url (http, nfs, file)
• BZ - 1452362 - Deadlock detected while waiting for resource messages during satellite-sync
• BZ - 1455880 - failSystemAction does not check system action id
• BZ - 1469744 - Deadlocks encountered with system.setBaseChannel()
• BZ - 1471018 - Allow cancel event that was picked up from queue by WebUI
• BZ - 1481848 - [5.8] rhn_server.snapshot_server deadlock on Activation Key path
• BZ - 1483503 - JAVA core dumps occupy disk space in /usr/sbin
• BZ - 1486285 - rhn-satellite-activate --manifest-info shows failed manifest
• BZ - 1489564 - Cannot search Software Channel Entitlements according to the label (what is an output of rhn-satellite-activate)
• BZ - 1493143 - channel.software.mergeErrata deletes errata from source channel if it exists in destination channel
• BZ - 1494575 - RHEL7.* isn't subscribed to EUS channel with option --use-eus-channel
• BZ - 1505985 - [5.8] For a system subscribed to RHEL 7.2 EUS, Satellite 5 does not provide option to subscribe system to RHEL 7.3 EUS base channel

CVEs

(none)

References

• https://access.redhat.com/articles/273633
• https://access.redhat.com/articles/11258