Red Hat JBoss Operations Network 3.3 Update 02 (3.3.2) Release Notes
JBoss ON updates are cumulative. You only need to apply the latest update to receive all fixes from the previous updates for the same version.
A server update contains one or more updated server or agent or storage node components which can be applied to a JBoss ON server or agent directory. The JBoss ON system to which the update is applied must be fully installed and configured.
Changes and Fixes
This update includes all fixes and changes from Red Hat JBoss Operations Network 3.3 Update 01.
Security related issues
This update includes fixes for the following security related issues:
| ID | Component | Summary |
|---|---|---|
| CVE-2012-6153 CVE-2014-3577 |
Server | cxf: various flaws |
| CVE-2014-7849 | Server | eap: JBoss AS/WildFly Domain Management: Limited RBAC authorization bypass |
| CVE-2014-8122 | Server | JBoss Weld: Limited information disclosure via stale thread state |
| CVE-2014-7853 | Server | eap: JBoss AS/WildFly JacORB Subsystem: Information disclosure via incorrect sensitivity classification of attribute |
| CVE-2015-0297 | Security | Security: RHQ: ServerInvokerServlet remote code exec |
General bug fixes or changes
This update includes the following bug fixes or changes:
| ID | Component | Summary |
|---|---|---|
| This content is not included.BZ-1147098 | Server | The server needs to handle failures inserting raw data |
| This content is not included.BZ-1176162 | Server | rhqctl console does not handle signals correctly |
| This content is not included.BZ-1187645 | Server | UnsupportedOperationException on mergeInventoryReport() [details] |
| This content is not included.BZ-1198086 | Server | Error loading global condition cache: ORA-01427: single-row subquery returns more than one row |
| This content is not included.BZ-1200579 | Server | Unable to delete/remove agent plug-ins that define a bundle type target This content is not included.[details] |
| This content is not included.BZ-1202327 | Server | Relax the 1h minimum Session timeout validation [details] |
| This content is not included.BZ-1185375 | Storage Node | Upgrade from 3.2 to 3.3 fails at upgrade --storage-schema due to MigrateAggregateMetrics taking too long [details] |
| This content is not included.BZ-1206641 | Storage Node | Fix for BZ-1088046 is lost when storage node is installed from 3.3 Update-01 patched server |
| This content is not included.BZ-1206387 | Installer/Upgrade | apply-updates creates rhq-storage directory even if storage node is not installed causing rhqctl to fail install/start |
| This content is not included.BZ-1089495 | Other | Add support for Java 8 with JBoss ON 3.3.2 components This content is not included.[details] |
| This content is not included.BZ-1198034 | Other | Incorrect link in the readme.txt file of the JBoss ON 3.3.0 distribution package |
| This content is not included.BZ-1188743 | Provisioning/Bundles | Packages in a repository, that have an identical name to the deployment it's subscribed to, disappear in the Content->New screen. [details] |
| This content is not included.BZ-1200493 | Provisioning/Bundles | The output of rhq:audit is changed - Date is added to the "info" [details] |
| This content is not included.BZ-1194690 | Remote Client API/CLI | CLI doesn't work when agent-server communication uses sslsocket [details] |
Installation
The apply-updates utility included in the update archive will be used to update an existing JBoss ON server, agent, or storage node installation.
Updating a server and storage node
-
Shutdown the server and any other components controlled by the server's
rhqctlcommand. Other components would include the JBoss ON agent and storage node installed on the same host as the server. To shutdown all components, therhqctl stopcommand could be used. -
Make a backup of your existing server installation and your JBoss ON system's database.
-
Extract the server update archive to the host machine where the JBoss ON component to be updated is installed.
-
As the same user who starts the JBoss ON components being updated, execute the
apply-updatescommand passing in the path to RHQ_SERVER_HOME. For example:./apply-updates.sh /opt/jboss/on/jon-server-3.3.0.GAIf the target server directory includes a storage node installation, it will also be updated.
If the target server has an agent installed in the directory above RHQ_SERVER_HOME, the agent will also be updated. For example, the above command would have also applied an agent update to
/opt/jboss/on/rhq-agentif the agent was installed. -
Start the server and all of its components, such as the JBoss ON agent or storage node, normally.
If more than one server or storage node is running in a high availability (HA) configuration, repeat the above steps for each server and storage node.
NOTE: In some cases, the update may introduce property or configuration script file changes that cannot safely be applied to existing user modified property or configuration script files. In such cases a new base or default file is created, with a
.newfile name extension, alongside the existing or user modified file. For example:[jon-server-3.3.0.GA]$ ls bin/rhq-server.properties* rhq-server.properties rhq-server.properties.newIf the new or changed properties or configuration options are applicable to you, you will need to manually add or define them in their respective property or configuration file.
Updating an agent
NOTE: JBoss ON agents installed via RPM can not be updated using this process. Instead, update RPM based installations using your system's update manager.
These steps are only necessary if the agent's auto-update feature is disabled or if you want to manually update an existing agent.
Before proceeding, you should first apply the update to all servers in the JBoss ON system.
-
Shutdown the agent.
-
Make a backup of your existing agent installation.
-
Extract the server update archive to the host machine where the JBoss ON agent to be updated is installed.
-
As the same user who starts the JBoss ON agent being updated, execute the
apply-updatescommand passing in the path to RHQ_AGENT_HOME. For example:./apply-updates.sh /opt/jboss/on/rhq-agent -
Start the agent normally.
Repeat the above steps for any agent in the system that must be updated.
NOTE: In some cases, the update may introduce property or configuration script file changes that cannot safely be applied to existing user modified property or configuration script files. In such cases a new base or default file is created, with a
.newfile name extension, alongside the existing or user modified file. For example:[rhq-agent]$ ls bin/rhq-agent-env.* rhq-agent-env.sh rhq-agent-env.sh.newIf the new or changed properties or configuration options are applicable to you, you will need to manually add or define them in their respective property or configuration file.