RHSA-2015:0917 - Security Advisory

Topic

This is the 30 day notification of the End Of Life (EOL) plans for the
following versions of Red Hat Satellite 5:

• Red Hat Satellite 5.2
• Red Hat Satellite 5.3
• Red Hat Satellite 5.4
• Red Hat Satellite 5.5

Description

After May 29, 2015, as per the life-cycle support policy for Red Hat
Satellite, Red Hat will discontinue technical support services as well as
software maintenance services for all Red Hat Satellite versions 5.5 or
older. The listed versions will exit the existing Limited Maintenance
Release phase. This means that new bug fixes, security updates, and product
enhancements will no longer be provided for the following product versions:

• Red Hat Satellite 5.2
• Red Hat Satellite 5.3
• Red Hat Satellite 5.4
• Red Hat Satellite 5.5

Details of the Satellite support policy can be found at:

https://access.redhat.com/support/policy/updates/satellite/

Notes:

1) Red Hat will continue to support Red Hat Satellite and Proxy version 5.6
and newer.

2) All versions of Satellite 5.5 and below will be EOL on May 29 2015.

Though we are committed to the May 29 2015 date for beginning the process
of decommissioning support for Satellite versions listed above, we
recognize that our customers have woven these products very deeply into
their processes and may need some time to upgrade.

For upgrade purposes, please note the following date:

• May 29 2015 - The Satellite and Proxy versions listed above will enter an

inactive state. After this date, Satellite Certificates will no longer be
generated or provided to customers requesting them for these EOL
product versions.

How to proceed:

• All affected Satellite and Proxy users must plan to upgrade to a newer

version prior to May 29 2015.

• Find an overview of various aspects for this upcoming EOL date at:

https://access.redhat.com/articles/1322933

• If you have a Technical Account Manager, contact that person immediately

to discuss upgrade plans.

• Otherwise, contact Red Hat support for assistance at:

https://www.redhat.com/en/services/support

• Alternatively, Red Hat Consulting can be engaged to assist with a smooth

migration, see https://www.redhat.com/en/services/consulting.

More information on Red Hat Consulting for Satellite can be found in the
PDF document linked to in the References section.

It is critical to ensure you have a plan to upgrade Red Hat Satellite and
Proxy listed versions, prior to May 29 2015.

Customers who choose to continue to deploy any of the listed Red Hat
Satellite or Proxy offerings will continue to have access via Red Hat
Network (RHN) to the following content as part of their active Red Hat
Satellite subscription:

• Previously released bug fixes, security updates, and product

enhancements.

• Red Hat Knowledgebase and other content (whitepapers, reference

architectures, etc.) found in the Red Hat Customer Portal.

• All Red Hat Satellite documentation.

Customers are strongly encouraged to take the advantage of the upgrade
benefits of their active Red Hat Satellite subscription, and migrate to an
active version of Red Hat Satellite such as version 5.6 or 5.7.

Details of the Red Hat Satellite life-cycle can be found at:
https://access.redhat.com/support/policy/updates/satellite/

Solution

The overview for the Satellite Upgrade process starting point is outlined
in the Red Hat Satellite 5.7 Installation Guide, linked to in the
References section.

For detailed instructions on upgrading Red Hat Satellite, please refer to
the /etc/sysconfig/rhn/satellite-upgrade/README file. This can be found
within the rhn-upgrade package. Before proceeding, it is important to read
the complete details, contained within the most current rhn-upgrade package
README file.

As with all Satellite upgrades, please ensure that known good backups are
available, especially of the database.

Affected Products

• Red Hat Satellite with Embedded Oracle 5.5 for RHEL 6 x86_64
• Red Hat Satellite with Embedded Oracle 5.5 for RHEL 6 s390x
• Red Hat Satellite with Embedded Oracle 5.5 for RHEL 5 x86_64
• Red Hat Satellite with Embedded Oracle 5.4 for RHEL 6 x86_64
• Red Hat Satellite with Embedded Oracle 5.4 for RHEL 5 x86_64
• Red Hat Satellite with Embedded Oracle 5.4 for RHEL 5 i386
• Red Hat Satellite with Embedded Oracle 5.3 x86_64
• Red Hat Satellite with Embedded Oracle 5.3 i386
• Red Hat Satellite with Embedded Oracle 5.2 x86_64
• Red Hat Satellite with Embedded Oracle 5.2 i386

Fixes

• BZ - 1212279 - Satellite 5.5 and prior end of life - 30 day warning

CVEs

(none)

References

• https://access.redhat.com/security/updates/classification/#low
• https://www.redhat.com/f/pdf/consulting/RHNSatelliteImplementation-Brochure.pdf
• https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/5.7/html/Installation_Guide/chap-Upgrades.html