RHBA-2019:4199 - Bug Fix Advisory

Topic

An update is now available for CloudForms Management Engine 5.11.

Description

Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller (MVC) framework for web application development. Action Pack implements the controller and the view components.

This update fixes various bugs and adds enhancements. Documentation for these changes is available from the Release Notes document linked to in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

Affected Products

• Red Hat CloudForms 5.11 x86_64

Fixes

• BZ - 1295839 - [RFE][M-5] Option to automatically reset all users dashboards
• BZ - 1314875 - [RFE][M-5] Clone Dashboards in UI
• BZ - 1402112 - [RFE] Add Current region and zone to 'about'
• BZ - 1415106 - [RFE] Add the ability to run service-related automate tasks in a specific zone
• BZ - 1429540 - [RFE] Filters should be renamed to Global filters on some pages
• BZ - 1430159 - [RFE] Ability to print PDF of right size recommendation for single VM
• BZ - 1440191 - [RFE] - Command Line log collection script stored in the tools directory
• BZ - 1445717 - OpenStack infra provider does not automatically refresh after being linked to a cloud provider
• BZ - 1447170 - [RFE] Add more currency or allow user to define to chargeback rate
• BZ - 1455145 - [RFE][M-5] Add functionality to suspend a provider
• BZ - 1460798 - [RFE] Include VM status in List View
• BZ - 1461487 - [RFE] Determining which Service Catalog uses which Service Dialog
• BZ - 1469035 - [RFE] Change "Change stored password" link to button
• BZ - 1475616 - Undercloud Nodes are only showing the first SCSI disk in the array of disks
• BZ - 1480819 - 'OSP Director > Scale Infrastructure Provider' is incomprehensible for users
• BZ - 1486765 - [RFE][L-8] Ability to schedule date for automate tasks to be executed on
• BZ - 1487178 - [RFE] Add a Dashboard for OpenStack Tenant
• BZ - 1498996 - [RFE][XS-2] Add 'Check All' button to /ui/service/services
• BZ - 1504155 - [RFE] Need report for list of floating IPs per Openstack Projects/Tenants
• BZ - 1507011 - Missing spinner in Monitor/Alerts
• BZ - 1515952 - [RFE] Include 200, 500 options in Items per page
• BZ - 1516838 - Empty "Started" date when VM started
• BZ - 1516912 - [RFE] Include Tenant name in Security Group table
• BZ - 1518613 - [RFE] Provider can have its compliance checked, but there is no compliance box in details like on VMs
• BZ - 1519359 - Azure provider allows validation with no Subscription ID
• BZ - 1525835 - Duplicate flash message on resetting edit of Class Schema Sequence from Datastore
• BZ - 1527695 - Virtual Machine CPU States chart is not correct when some numbers are 0
• BZ - 1528984 - [RFE][UI] Username related message doesn't look good when adding infra provider
• BZ - 1532720 - [RFE] Support WebMKS Console in Service UI
• BZ - 1533263 - [RFE] Add Quota calculations for reconfigure resize disks
• BZ - 1534529 - GenericObject: Can't add existing custom button in existing button group of GenericObject
• BZ - 1534539 - GenericObject: Belonging custom button disappears from accordion tree after editing related custom group
• BZ - 1535215 - Need to click two times on simulator to appear
• BZ - 1535782 - [RHV] Switch Smart State Analysis code for the oVIrt provider to work with APIv4 instead of deprecated APIv3
• BZ - 1535928 - [RFE] Back options on datastore page doesn't have option to navigate to all page of datastore
• BZ - 1540058 - [RFE] Back button option on detail page of Security Group
• BZ - 1543007 - VMRC authentication validation is required, if mistakenly RHV provider type is chosen at first
• BZ - 1545942 - [RFE] Ability to set default filters for all users to not show archived VM's
• BZ - 1546108 - [RFE] Cannot see version of the product in the product
• BZ - 1546927 - [RFE] Include tag categories as fields in the reporting which based on Cloud Tenant.
• BZ - 1547081 - Capacity & Utilization view is lost after clicking Refresh button
• BZ - 1549128 - [RFE][CloudForms][Storage] Create a new volume choosing availability zones
• BZ - 1553846 - [RFE] Select entry point should be shown on editing
• BZ - 1557488 - "Load Values on init" button not displayed properly.
• BZ - 1559335 - [RFE] Enable and Disable schedule buttons not present on Schedule details page
• BZ - 1566600 - Handle absence of managed disks/managed images
• BZ - 1573609 - [RFE][Lenovo] Run ansible playbooks against resources in physical infra inventory
• BZ - 1574822 - [RFE][PRD] As an operator, I want to see the list of preexisting base images
• BZ - 1574823 - [RFE][PRD] As an operator, I want to see the list of compatible kick start files
• BZ - 1574824 - [RFE][PRD] As an operator, I want to be able to provision preexisting base image on several systems
• BZ - 1574826 - [RFE][PRD] As an operator, I want to be able to provide custom kick start file to be used during the provisioning
• BZ - 1578076 - [RFE] Allow custom favicons and images into asset pipeline
• BZ - 1581817 - [RFE] Can Not Create VM Chargeback Reports with CPU Cores Rate
• BZ - 1591797 - [RFE][L-8] Create Automate method type for External Tower Job Template
• BZ - 1594381 - [RFE] Allow custom endpoint for Azure provider
• BZ - 1594497 - [RFE] LDAP Groups for User should have a search/filter box
• BZ - 1595259 - [RFE] Have the ability to export a generic object definition as well as namespace to be able to import
• BZ - 1595558 - [RFE] CFME should be able to assign and handle multiple AMQP endpoints with RHOSP
• BZ - 1597125 - [RFE] A user should not see all stacks of all tenants in Stacks view.
• BZ - 1600961 - [RFE] Add ability to create a Git backed automation domain
• BZ - 1602072 - [RFE] List prices of catalogs before user orders on service catalog screen
• BZ - 1608475 - [RFE] Collecting info for snapshot total_size through Ovirt/RHV without using Smart state analysis
• BZ - 1609348 - French localization import buttons say validate.
• BZ - 1609541 - Smart managements tags broken on any container provider object
• BZ - 1614567 - [RFE] CFME: Support for Static IPs by Port when using CloudForms with OpenStack
• BZ - 1623636 - [RFE] Allow for Instance Calls in Automate State Machine to Specify a Different Zone for Task to be Run
• BZ - 1628228 - [RFE] Network Switches and Port Groups are not included in RBAC, even though they are taggable
• BZ - 1630040 - [RFE] Active Services should not expand upon selection of a service in a filter
• BZ - 1631845 - [RFE] Support using EC2 Roles for authentication
• BZ - 1632718 - Chrome: Modal dialog displayed when logging in with bad password instead of "Login failed" message
• BZ - 1633867 - [RFE] Select between Eager or Lazy Zeroed disk format for thick provisioning in VMWare
• BZ - 1634794 - Alert 'abandon changes' shown even when no changes made in multiple host edit
• BZ - 1638245 - [RFE] Display IDs of VMs, Reports, Results, etc. in UI
• BZ - 1638390 - Not user-friendly message is appears during creating cloud router if quota exceeded for resources
• BZ - 1639387 - User with View My Tasks permission can see other users tasks via API
• BZ - 1641905 - [RFE] RBAC change group ownership of service catalog item
• BZ - 1643331 - [RFE] Ability to open an external URL using custom buttons
• BZ - 1645041 - [RFE] Add a method to remove automate domains in an automated fashion (REST API or other)
• BZ - 1645193 - Chargeback report creation fails if Storage Allocated Rate column is included
• BZ - 1646562 - Bad field name format for chargeback rates
• BZ - 1649280 - Mandatory fields during creation of cloud network are not marked as mandatory
• BZ - 1650104 - No Flash message appear when clicked on "Upload Chosen File" without choosing Custom Image File
• BZ - 1650117 - [RFE] No option to search timezone while creating reports
• BZ - 1650294 - [RFE] Status Attributre is Not Available on Cloud Volume Summary Screen
• BZ - 1650396 - [RFE] Include option to choose Allocation pools, DNS Nameserver, Host Routes while creating OpenStack Network
• BZ - 1650418 - Full option of widget shows inaccurate name
• BZ - 1650484 - [Regression] Multiple cloud provider shown while adding new cloud tenant
• BZ - 1650501 - Number of disks for VMs on vSphere shows incorrect
• BZ - 1650506 - Power options shutdown guest and restart guest are disabled on scvmm vm's details page
• BZ - 1650559 - Ansible playbook button type not working while creating button on generic object class
• BZ - 1652577 - Azure Routers, Sec Groups and Floating IPs types displayed with ManageIQ path
• BZ - 1652858 - Service catalog item shows VMs if selected template was deleted
• BZ - 1653772 - Compute-Infrastructure-Cluster summary page has untranslated text
• BZ - 1653779 - Compute-Infrastructure-Hosts summary page has untranslated text
• BZ - 1653787 - User Icon - Tasks - Zone drop-down menu has untranslated text
• BZ - 1653800 - Compute - Cloud - Providers - Advanced Search box has untranslated text
• BZ - 1654511 - No route table subnet associations cause Amazon AWS Smartstate failure
• BZ - 1655114 - Clicking on provider from Monitor->Alerts->All Alerts does not display breadcrumb
• BZ - 1655495 - CFME log in page, invalid credentials error message partially localized
• BZ - 1655794 - After upgrading from 4.2 to 4.6, evmserverd service fails to start with rake aborted
• BZ - 1655977 - [RFE] Escape sequences for ui-tooltip in service dialog
• BZ - 1656318 - Automate model and service dialogs are not collected during log collection for NFS and Samba types
• BZ - 1656371 - API requests with attributes work slow
• BZ - 1656722 - Inconsistent options in `Show at Login` drop-down of Visual tab on My Settings page.
• BZ - 1656734 - The "All Ansible Tower Templates" view in the Tower provider also shows embedded Ansible templates
• BZ - 1656838 - fix_auth says it is fixing database.yml.yaml
• BZ - 1658906 - Provisioned Services doesn't show the date in service name for reconfigure services
• BZ - 1659088 - No cancel button on cloud image policy simulation page
• BZ - 1659452 - Custom button: Group `Display on Button` option not working
• BZ - 1660163 - Dashboard Menu widgets Role access won't save
• BZ - 1662991 - [RFE] Database restore should not start when evmserverd is running
• BZ - 1663562 - Validation message for unsupported "towhat" field values when creating policies from the API is unclear
• BZ - 1663972 - Internal Server Error when querying services attribute `reconfigure_dialog `
• BZ - 1664852 - Bootstrap select for math symbol in Expression or Scope "Count of" causes a loading screen to display twice
• BZ - 1664886 - Bootstrap select for "CONTAINS" in Expression or Scope "Tag" causes a loading screen to display twice
• BZ - 1664888 - [RFE] Allow OpenStack Director to be Added As Infrastructure Provider when Ironic Service Is Not Running
• BZ - 1667178 - Container Provider Dashboard View: No Success Message When Editing a Tag
• BZ - 1668004 - Errors during substitution for Service Provisioning Email.
• BZ - 1668437 - WebMKS console does not work in Edge browser - CSP violation
• BZ - 1669851 - [RFE][PRD] As an operator, I must be able to see the current firmware landscape on the system
• BZ - 1669860 - [RFE][PRD] As an operator, I must be able to see BIOS version (firmware rev)
• BZ - 1669861 - [RFE][PRD] As an operator, I must be able to see BMC version (firmware rev)
• BZ - 1669867 - [RFE][PRD]As an operator, I must be able to update BIOS firmware
• BZ - 1669868 - [RFE][PRD] As an operator, I must be able to update BMC firmware
• BZ - 1670016 - Storage profile provisioning fails due to vmodl.fault.InvalidArgument
• BZ - 1670138 - SSL certificate registration does not overwrite existing server.cer and server.cer.key
• BZ - 1670150 - Setting up Postgres server SSL certificates on IPA server fails
• BZ - 1670373 - Suspending VM in SSUI from service details resullts in unknown power state
• BZ - 1670456 - Unable to cancel policy simulation on instance when "Cancel" button is clicked
• BZ - 1670472 - Filters first save button triggers saving of filter
• BZ - 1670604 - Configuring SSL certs should enable certmonger service
• BZ - 1671844 - [RFE] Remove GCE Provider
• BZ - 1671909 - [RFE] Remove Appliance for GCE and Azure
• BZ - 1671911 - [RFE] Remove Podify CloudForms
• BZ - 1672437 - Multiple problems with Configuration -> Workers screen
• BZ - 1672689 - [RFE] Embedded Ansible pages are missing navigation on left side of page
• BZ - 1672933 - [RFE] Remove Cloud Intelligence > RSS Feed and Timelines UI
• BZ - 1672934 - [RFE] Remove Optimize > Bottleneck and Planning UI
• BZ - 1672937 - [RFE] Remove OpenShift Deployment in Automate
• BZ - 1672949 - [RFE] Remove all Public Cloud Providers Load Balancer from UI
• BZ - 1674055 - unexpected output from at least two cf-me packages due to the use of pushd/popd, without redirecting to /dev/null.
• BZ - 1677258 - Boolean user input filter popup shows default field always as selected
• BZ - 1677548 - [RFE] Use Ansible Runner for Ansible Embedded Integration
• BZ - 1677553 - [RFE] Update Ansible Tower Provider integration with API V2
• BZ - 1677558 - [RFE] Update Appliance to latest Postgres
• BZ - 1677560 - [RFE] Update Appliance to RHEL 8
• BZ - 1677561 - [RFE] Update Appliance Dependencies: Rails, Ruby
• BZ - 1677571 - [RFE] Implement Service State
• BZ - 1677575 - [RFE] Support Export/Import of Domain with Ansible Method
• BZ - 1678046 - [RFE] As a CloudForms Admin, I can configure in a dedicated UI the data to push to Topology Inventory Service filtered by Provider or Provider Type
• BZ - 1678047 - [RFE] As a CloudForms Admin, I can control which user get access to SaaS UI apps
• BZ - 1678048 - [RFE] As a CloudForms User, I can be re-directed to SaaS UI Apps
• BZ - 1678122 - [RFE] As a Admin, I want to see Tenant relationship in Providers, Automate Domain and Services if any
• BZ - 1678123 - [RFE] As a Service Author, when I create a Service I can select Tenants where the service will be available
• BZ - 1678132 - [RFE] As a Service Author or and Automate Designer, passing variables between CloudForms and Ansible should be automated and simple
• BZ - 1678135 - [RFE] As an Automate Designer, I should be able to pass variables between Successive Playbook Method in a State Machine
• BZ - 1678136 - [RFE] As an Service Designer, I should be able to pass variables between Catalog Items in a Bundle
• BZ - 1678142 - [RFE] As a User, I want to open my VMs of a remote region from Global Region in a new browser tab to be able to performs all actions
• BZ - 1678149 - [RFE] As a Service Author, I want to be able to copy Catalog Items and Catalog Bundle
• BZ - 1678150 - [RFE] As a User, when I look at a Report, I want to be able to Sort Column and filter the content
• BZ - 1678151 - [RFE] As an Admin, I want to add a Custom Menu in Left Navigation bar
• BZ - 1678190 - [RFE] As an Admin, when I logged to CloudForms for the first time, I should have a page welcoming me and telling me what is the next action: Add Provider
• BZ - 1678192 - [RFE] BreadCrumbs should be consistent across whole CloudForms UI
• BZ - 1678194 - [RFE] Partner Integration: Offer Possibility to add their own menu, buttons and methods to be added by "overlay" of CloudForms UI
• BZ - 1678196 - [RFE] UI Menu Simplification
• BZ - 1680525 - Custom Button: button events table not showing for CloudNetwork object
• BZ - 1683697 - Accordion after creating a condition does not reflect correct selection
• BZ - 1684226 - [Containers Overview] TypeError: Cannot read property 'layout' of undefined
• BZ - 1684567 - A service dialog element's dynamic method always runs when the dialog loads despite load_values_on_init for the element being false
• BZ - 1684575 - The "Load values on init" option for a service dialog element is only visible when "Show Refresh Button" is set to "yes"
• BZ - 1684681 - [RFE] API Filtering for multiple IP's
• BZ - 1685063 - [RFE] Ability to change volume size for openstack cinder volumes
• BZ - 1685266 - Service Dialog Date/DateTime Picker dynamic dialog values not displayed.
• BZ - 1686076 - [RFE] : Need a provider field in VM Details page in service UI
• BZ - 1686617 - No cancel button on infra virtual machine policy simulation page
• BZ - 1686619 - Clicking quadicon after running policy simulation on infra VM results in a page does not exist error
• BZ - 1686762 - Internal server error while creating schedule with 'EVM Group'
• BZ - 1687059 - centos icon not visible due to misspelled file name
• BZ - 1687086 - cloudforms registration process with satellite (+1 org) must require the selection of the sat6 org before allowing to save
• BZ - 1687597 - User with custom role cannot retire VM
• BZ - 1688359 - Title text changes after clicking quadicon on Policy Simulation of cloud instance
• BZ - 1688370 - No title text on policy simulation page depending on navigation steps
• BZ - 1689369 - [Regression][VMware] CD/DVD Drives does not list ISO files, dropdown blank
• BZ - 1690508 - State machine for Orchestration Retirement is using the old values
• BZ - 1690572 - The first time you click a squash button on policy simulation page it doesn't respond
• BZ - 1692537 - VM Compliance: Error when trying to access Status/History screens
• BZ - 1692853 - [RFE] Clusters view does not indicate name of the provider
• BZ - 1693362 - [RFE] How to tell if RedHat domain is out of sync after upgrade without UI
• BZ - 1693994 - [RFE][V2V][UI] Migration plan detail popover don't show conversion host if related conversion host gets deleted
• BZ - 1695008 - vms marked orphaned following hard reboot of all esxi hosts
• BZ - 1695219 - service provisioned with retirement_warn_offset_days sets the retirement_warn field as an integer : "1554310357"
• BZ - 1695566 - Updating Advanced Settings with an invalid key-value pair lands in Exception page
• BZ - 1697467 - Extending a RHV storage causes duplication and does not copy tags over
• BZ - 1698184 - Null Coalescing fields don't work as input Parameters
• BZ - 1698193 - Missing resource error message poorly worded
• BZ - 1700070 - Title text for Physical Infrastructure Compliance Policies is "Physical Server" Compliance Policy
• BZ - 1704835 - HA DB fail-over after minor version upgrade using webui fails on missing ///tmp/worker_monitor...
• BZ - 1705105 - [RFE] - Downloadable VM images should be available in compressed form.
• BZ - 1706764 - Bad UI while adding entry to Trusted Forest Settings
• BZ - 1707328 - Map tags row deletion doesn't produce flash message
• BZ - 1707537 - [RFE] Move authentication configuration from authconfig to authselect
• BZ - 1707961 - Dialog Editor allows you to modify field(s) and exit without saving the dialog.
• BZ - 1708203 - 'Validate' button is not getting enabled while adding builtin automate method
• BZ - 1709957 - wrong number of cells for None row in Catalog Item->Request Info->Catalog->Selected VM
• BZ - 1710599 - AWS GovCloud region available for selection when scheduling database backups
• BZ - 1710623 - RFE: AWS Region drop-downs should be consistent
• BZ - 1711855 - [RFE] Remove RH Insight Menu
• BZ - 1714185 - Can't remove Custom Image from catalog item and from catalog Bundle
• BZ - 1714197 - [RFE] Add Optimisation Menu under Cloud Intel to execute and view Specific Reports
• BZ - 1716858 - [RFE] Expose move_into_folder(folder) ruby method to Automate Explorer
• BZ - 1717695 - [RFE] Tag values to be able to have more than a 50 character limit
• BZ - 1717843 - [RFE] `Request is required` for button create in ansible while it is in Advanced tab
• BZ - 1718457 - Automate Explorer Tree Reopens Automatically When Making Changes
• BZ - 1718495 - Embedded method doesn't display when creating a new method and adding embedded method at same time.
• BZ - 1718833 - EC2 Key pairs without public key filled cannot be removed
• BZ - 1718858 - [v2v] It is possible to run a migration plan again via rest api
• BZ - 1719322 - Object attribute selection is not working for evm group and tenant
• BZ - 1719399 - vCenter is rebuilt without removing Provider from CloudForms which causes duplicate hosts with appending -2 in name
• BZ - 1720187 - SmartState Analysis resets a VMware Raw Device Mapped disk from "disk_type": "rdm-physical" to "disk_type": "thick"
• BZ - 1720640 - Clicking on Customize in Requests leadst to: undefined method `[]' for nil:NilClass [miq_request/prov_field_changed]
• BZ - 1722197 - Unable to copy playbook type automate method with it's data
• BZ - 1723420 - [RFE] Reduce the number of ssh connections when verifying a conversion host
• BZ - 1723899 - Templates are filtered when provisioning from VMs page where search is applied
• BZ - 1724496 - [Regression] Timelines of Properties[Provider summary page] is pseudo-active
• BZ - 1725838 - After applying advanced search screen is grayed out and unclickable
• BZ - 1726844 - Remove always disabled 'Cancel' and 'Back' button from migration plan page
• BZ - 1727131 - [v2v] [API] It is possible to create multiple conversion hosts, based on the same RHV host
• BZ - 1728740 - Compliance policies view doesn't show Container Project Compliance Policies name
• BZ - 1728774 - Add button already/always enabled while adding a new Service Catalog Item
• BZ - 1729265 - Dialog fields not showing on the service order page when the field is tag control
• BZ - 1729953 - Unexpected error encountered while performing operations on VM's datastore page
• BZ - 1730311 - The embedded Ansible manageiq-automate role's 'get_attribute' task fails to return some state machine attributes
• BZ - 1732808 - db:migrate fails: 34000000000001 is out of range for ActiveModel::Type::Integer with limit 4 bytes
• BZ - 1738664 - Error occurs when click on "Compute" navigation item after downloading a report from the Compute > Infrastructure > Hosts view.
• BZ - 1740691 - [RFE] Add VMRC in Service UI

CVEs

• CVE-2016-10735
• CVE-2019-0223

References

• https://access.redhat.com/documentation/en-us/red_hat_cloudforms/5.0/html/release_notes