RHBA-2019:0075 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
OpenStack Platform 10.0 (Newton) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the os-apply-config component:

• This update allows nodes to recover when a "group" attribute was not set in a SoftwareConfig heat resource.

Prior to this update, if a "group" attribute was not set in a SoftwareConfig heat resource, the resulting invalid json caused os-apply-config to fail. Even when the "group" attribute was specified, os-apply-config runs still failed.

With this update, s-apply-config now ignores non-dict json instead of generating an error. This allows affected nodes to recover. (BZ#1653513)

Changes to the python-oslo-rootwrap component:

• Previously, after a service upgrade, 'oslo.rootwrap' was unable to stop the service any more as the executable was replaced (renamed).

With this update, the executables are renamed to use '/proc/$pid/cmdline' if it exists instead of '/proc/$pid/exe'. As a result, 'oslo.rootwrap' is now able to stop a service properly after an upgrade, even when the executable is replaced (renamed). (BZ#1511592)

Changes to the python-oslo-utils component:

• With this update, oslo.utils now hides private keys in logs.

Prior to this update, if Nova or Heat was configured to log at the DEBUG log level, private keys were logged as clear text when a keypair was created. (BZ#1612881)

Changes to the rhosp-release component:

• This update adds maintenance release version information to the rhosp-release file.

For instance:
....
$ cat ./etc/rhosp-release
Red Hat OpenStack Platform release 10.0.10 (Newton)
.... (BZ#1653848)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.5.

The Red Hat OpenStack Platform 10 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 10, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat OpenStack 10 x86_64

Fixes

• BZ - 1511592 - l3agent can not kill keepalived process due to rootwrap filter when keepalived gets updated
• BZ - 1590876 - test_create_list_show_delete_interfaces frequently failing
• BZ - 1598908 - unable to live migrate instances when specifying nova api version 2.30
• BZ - 1612881 - [OSP10] Heat in DEBUG logs private keys when a template creates a keypair
• BZ - 1622077 - tempest.scenario.test_network_v6.TestGettingAddress tests failing with custom guest image and OVS firewall
• BZ - 1623921 - os-collect-config not working after a stop of systemd-journald
• BZ - 1635914 - /etc/localtime is still not a symbolic file to a file under /usr/share/zoneinfo
• BZ - 1636296 - [OSP10] instack uses /tmp as temporary directory for DIB to run scripts, but /tmp is often mounted with noexec
• BZ - 1641754 - rabbitmq-server: eheap_alloc: Cannot allocate 3280272216 bytes of memory (of type "old_heap")
• BZ - 1652903 - Minor Upgrade deployment stuck and fails
• BZ - 1653513 - OS::Heat::SoftwareConfig - missing group property can permanently break software deployments and os-collect-config on deployed nodes
• BZ - 1653848 - Add maintenance release to /etc/rhosp-release
• BZ - 1657373 - [OSP10] Newer erlang in OSP should Obsolete erlang-reltool

CVEs

(none)

References

• https://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes