- Announce - oVirt List Archives

CVE-2018-3639 - Important - oVirt - Speculative Store Bypass
by Sandro Bonazzola 25 May '18

25 May '18

As you may have already heard, an industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions. This issue is well described by CVE-2018-3639 announce available at https://access.redhat.com/security/cve/cve-2018-3639. oVirt team has released right now an update of ovirt-engine to version 4.2.3.7 which add support for SSBD CPUs in order to mitigate the security issue. If you are running oVirt on Red Hat Enterprise Linux, please apply updates described in https://access.redhat.com/security/cve/cve-2018-3639. If you are running oVirt on CentOS Linux please apply updated described by: CESA-2018:1629 Important CentOS 7 kernel Security Update <https://lists.centos.org/pipermail/centos-announce/2018-May/022843.html> CESA-2018:1632 Important CentOS 7 libvirt Security Update <https://lists.centos.org/pipermail/centos-announce/2018-May/022840.html> CESA-2018:1649 Important CentOS 7 java-1.8.0-openjdk Security Update <https://lists.centos.org/pipermail/centos-announce/2018-May/022839.html> CESA-2018:1648 Important CentOS 7 java-1.7.0-openjdk Security Update <https://lists.centos.org/pipermail/centos-announce/2018-May/022838.html> An update for qemu-kvm-ev has been also tagged for release and announced with CESA-2018:1655 Important: qemu-kvm-ev security update <https://lists.centos.org/pipermail/centos-virt/2018-May/005804.html> but due to some issues in CentOS release process for Virt SIG content, it is not yet available on mirrors. We are working with CentOS community to get the packages signed and published as soon as possible. In the meanwhile you can still get the update package by enabling the test repository https://buildlogs.centos.org/centos/7/virt/x86_64/kvm-common/ on your systems or manually installing the package from the repository. If you're running oVirt on a different Linux distribution, please check with your vendor for available updates. Please note that to fully mitigate this vulnerability, system administrators must apply both hardware “microcode” updates and software patches that enable new functionality. At this time, microprocessor microcode will be delivered by the individual manufacturers. The oVirt team recommends end users and systems administrator to apply any available updates as soon as practical. Thanks, -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig> <https://redhat.com/summit>

1 1

[ANN] oVirt 4.2.4 First Release Candidate is now available
by Sandro Bonazzola 24 May '18

24 May '18

The oVirt Project is pleased to announce the availability of the oVirt 4.2.4 First Release Candidate, as of May 24th, 2018 This update is a release candidate of the fourth in a series of stabilization updates to the 4.2 series. This is pre-release software. This pre-release should not to be used in production. This release is available now for: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.5 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.5 or later Due to an issue with CentOS mirrors oVirt Node has not been built. We'll build and release oVirt Node as soon as the updated qemu-kvm-ev will be available on CentOS mirrors. See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is available - oVirt Node is not yet available, will be provided soon[2] Additional Resources: * Read more about the oVirt 4.2.4 release highlights: http://www.ovirt.org/release/4.2.4/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.2.4/ [2] http://resources.ovirt.org/pub/ovirt-4.2-pre/iso/ -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig> <https://redhat.com/summit>

1 1

Re: [ovirt-users] [ANN] oVirt 4.2.4 First Release Candidate is now available
by Sandro Bonazzola 24 May '18

24 May '18

2018-05-24 14:51 GMT+02:00 Gianluca Cecchi <gianluca.cecchi(a)gmail.com>: > On Thu, May 24, 2018 at 2:09 PM, Sandro Bonazzola <sbonazzo(a)redhat.com> > wrote: > >> The oVirt Project is pleased to announce the availability of the oVirt >> 4.2.4 First Release Candidate, as of May 24th, 2018 >> >> >> > [snip] > > >> Additional Resources: >> * Read more about the oVirt 4.2.4 release highlights:http://www.ovirt.or >> g/release/4.2.4/ >> * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt >> * Check out the latest project news on the oVirt blog: >> http://www.ovirt.org/blog/ >> >> [1] http://www.ovirt.org/release/4.2.4/ >> >> > It seems the link to release notes is missing... > Looks like we have some outage in github publishing system. Here's the github copy of the release notes: https://github.com/oVirt/ovirt-site/blob/master/source/release/4.2.4/index.… > Gianluca > -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig> <https://redhat.com/summit>

1 0

oVirt Privacy policy change
by Sandro Bonazzola 24 May '18

24 May '18

*As part of an oVirt project review, we're publishing an updated privacy policy.You should read the statement fully, but the key updates include:* Clearer descriptions of how oVirt uses your personal data to provide services;* Additional detail on how your personal data may be shared to serve the public interest and that of the open source community; and* More focus on how you can review, modify, and update your personal data.You can find the new statement on the oVirt website at this location: https://ovirt.org/site/privacy-policy/ <https://ovirt.org/site/privacy-policy/>oVirt website pages have been updated to include links to the privacy policy. The new privacy statement takes effect on Friday, May 25, 2018. * -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig> <https://redhat.com/summit>

1 0

[ANN] oVirt 4.2.3 is now generally available
by Sandro Bonazzola 04 May '18

04 May '18

The oVirt Project is pleased to announce the general availability of oVirt 4.2.3 as of May 4th, 2018 This update is the third release in a series of stabilization updates to the 4.2 series. This release is available now for: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.4 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.4 or later * oVirt Node 4.2 See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance will be avialable in a few hours - oVirt Node will be avialable in a few hours [2] Additional Resources: * Read more about the oVirt 4.2.3 release highlights: http://www.ovirt.org/release/4.2.3/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.2.3/ [2] http://resources.ovirt.org/pub/ovirt-4.2/iso/ -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig> <https://redhat.com/summit>

1 0

[ANN] oVirt 4.2.3 Fourth Release Candidate is now available
by Lev Veyde 03 May '18

03 May '18

The oVirt Project is pleased to announce the availability of the oVirt 4.2.3 Fourth Release Candidate, as of May 3rd, 2018 This update is a release candidate of the third in a series of stabilization updates to the 4.2 series. This is pre-release software. This pre-release should not to be used in production. This release is available now for: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.4 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.4 or later * oVirt Node 4.2 See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is available - oVirt Node is available [2] Additional Resources: * Read more about the oVirt 4.2.3 release highlights: http://www.ovirt.org/release/4.2.3/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.2.3/ [2] http://resources.ovirt.org/pub/ovirt-4.2-pre/iso/ -- Lev Veyde Software Engineer, RHCE | RHCVA | MCITP Red Hat Israel <https://www.redhat.com> lev(a)redhat.com | lveyde(a)redhat.com <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 0

[ANN] oVirt 4.2.3 Third Release Candidate is now available
by Lev Veyde 26 Apr '18

26 Apr '18

The oVirt Project is pleased to announce the availability of the oVirt 4.2.3 Third Release Candidate, as of April 26th, 2018 This update is a release candidate of the third in a series of stabilization updates to the 4.2 series. This is pre-release software. This pre-release should not to be used in production. This release is available now for: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.4 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.4 or later * oVirt Node 4.2 See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is available - oVirt Node is available [2] Additional Resources: * Read more about the oVirt 4.2.3 release highlights: http://www.ovirt.org/release/4.2.3/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.2.3/ [2] http://resources.ovirt.org/pub/ovirt-4.2-pre/iso/ -- Lev Veyde Software Engineer, RHCE | RHCVA | MCITP Red Hat Israel <https://www.redhat.com> lev(a)redhat.com | lveyde(a)redhat.com <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 0

[ANN] oVirt 4.2.3 Second Release Candidate is now available
by Sandro Bonazzola 18 Apr '18

18 Apr '18

The oVirt Project is pleased to announce the availability of the oVirt 4.2.3 Second Release Candidate, as of April 18th, 2018 This update is a release candidate of the third in a series of stabilization updates to the 4.2 series. This is pre-release software. This pre-release should not to be used in production. This release is available now for: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.4 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.4 or later * oVirt Node 4.2 See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: due to compose and build issues: - oVirt Appliance will be available tomorrow morning - oVirt Node will be available tomorrow morning [2] Additional Resources: * Read more about the oVirt 4.2.3 release highlights: http://www.ovirt.org/release/4.2.3/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.2.3/ [2] http://resources.ovirt.org/pub/ovirt-4.2-pre/iso/ -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig> <https://redhat.com/summit>

1 0

Announcing oVirt Orb
by Lev Veyde 16 Apr '18

16 Apr '18

oVirt project is happy to announce the oVirt Orb. oVirt Orb is a project that allows anyone to easily take an oVirt for a ride, test and play with it. Please take a look at the documentation at: https://ovirt.org/documentation/ovirt-orb/ Thanks in advance, -- Lev Veyde Software Engineer, RHCE | RHCVA | MCITP Red Hat Israel <https://www.redhat.com> lev(a)redhat.com | lveyde(a)redhat.com <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 0

[ANN] oVirt 4.2.3 First Release Candidate is now available
by Lev Veyde 12 Apr '18

12 Apr '18

The oVirt Project is pleased to announce the availability of the oVirt 4.2.3 First Release Candidate, as of April 12th, 2018 This update is a release candidate of the third in a series of stabilization updates to the 4.2 series. This is pre-release software. This pre-release should not to be used in production. This release is available now for: * Red Hat Enterprise Linux 7.4 or later * CentOS Linux (or similar) 7.4 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.4 or later * CentOS Linux (or similar) 7.4 or later * oVirt Node 4.2 See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is available - oVirt Node is available [2] Additional Resources: * Read more about the oVirt 4.2.3 release highlights: http://www.ovirt.org/release/4. <http://www.ovirt.org/release/4.2.3/>2 <http://www.ovirt.org/release/4.2.3/>. <http://www.ovirt.org/release/4.2.3/> 3 <http://www.ovirt.org/release/4.2.3/>/ <http://www.ovirt.org/release/4.2.3/> * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4. <http://www.ovirt.org/release/4.2.3/>2 <http://www.ovirt.org/release/4.2.3/>. <http://www.ovirt.org/release/4.2.3/> 3 <http://www.ovirt.org/release/4.2.3/>/ <http://www.ovirt.org/release/4.2.3/> [2] http://resources.ovirt.org/pub/ovirt-4. <http://resources.ovirt.org/pub/ovirt-4.2-pre/iso/>2 <http://resources.ovirt.org/pub/ovirt-4.2-pre/iso/>-pre <http://resources.ovirt.org/pub/ovirt-4.2-pre/iso/>/iso/ <http://resources.ovirt.org/pub/ovirt-4.2-pre/iso/> -- Lev Veyde Software Engineer, RHCE | RHCVA | MCITP Red Hat Israel <https://www.redhat.com> lev(a)redhat.com | lveyde(a)redhat.com <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 0