RHEA-2014:0677 - Product Enhancement Advisory

Topic

Red Hat Subscription Asset Manager 1.4, which adds various enhancements as well
as fixes security issues and bugs, is now available.

Description

Subscription Asset Manager acts as a local service to handle subscription
information and as a proxy for software updates on client machines.

This release of Subscription Asset Manager contains these enhancements:

• Subscription Asset Manager 1.4 has extended the enhanced reporting tool with

the ability to collect and report information on multiple Satellite 5.6
instances. The enhanced reporting tool previously supported reporting for only
one Satellite instance. (BZ#1011862)

• A new flatten_orgs option has been added to the splice checkin.conf

configuration file. When set to True, all configured organizations managed by
Subscription Asset Manager are combined or flattened into one single
organization, which allows administrators to view subscriptions across all
organizations in Subscription Asset Manager. This new option removes the need to
manually attach all organizations to a single one; however, flatten_orgs does
not allow administrators to view subscriptions by organization once flattened.
(BZ#1069250)

This release of Subscription Asset Manager also provides these bug fixes:

• If OpenJDK 1.7 was already installed, then the katello-jobs

service failed to start. (BZ#1010082)

• Attempting to import a manifest into SAM failed with the error 'Subscription

manifest refresh for provider <name> failed Reason: 387: unexpected token at...'
Some products were being improperly removed, which led to an inconsistent state
for the subscription data. (BZ#1057652)

• Running the 'subscription-manager clean' command returned a remote server

error. (BZ#1029733)

• The thumbslug process failed to start and returned NoClassDefFoundErrors,

because of a missing oauth JAR file. (BZ#1083132)

• The thumbslug package required the jakarta-commons-codec package, but this

conflicted with other SAM-related packages that required apache-commons-codec.
The dependencies have been updated to prevent this conflict. (BZ#1083156)

• Sending a notification containing guest IDs to the katello

service using an older API failed. The API support has been updated to allow
older clients to send guest information successfully.
(BZ#1084176)

• To address certain potential vulnerabilities, SAM now uses a ruby gem wrapper

and an updated version of ruby. (BZ#1084115)

All users of Red Hat Subscription Asset Manager are advised to upgrade to these
updated packages, which fix these issues and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64

Fixes

• BZ - 1010082 - Compatibility issue with java-1.7.0-openjdk
• BZ - 1029733 - Remote server error with subscription-manager clean.
• BZ - 1057652 - SAM can't import manifest
• BZ - 1069250 - [RFE] allow optional "flattening" of spacewalk orgs when syncing to SAM
• BZ - 1083132 - thumbslug does not start (missing class in oauth jar)
• BZ - 1083156 - thumbslug depends on jakarta-commons-codec in RHEL6
• BZ - 1084176 - katello does not pass guestIds param to candlepin

CVEs

(none)

References

(none)