7:32 a.m.
oVirt Node 4.4.8.2 Async update
On September 1st 2021 the oVirt project released an async update for oVirt
Node consuming the following packages:
-
ovirt-release44 4.4.8.2
-
vdsm 4.40.80.6
oVirt Node respin also consumed most recent CentOS Stream and Advanced
Virtualization content.
It also includes fixes for:
-
CVE-2021-31535 <https://access.redhat.com/security/cve/CVE-2021-31535>
libX11: missing request length checks
-
CVE-2021-3564 <https://access.redhat.com/security/cve/CVE-2021-3564>
kernel: double free in bluetooth subsystem when the HCI device
initialization fails
-
CVE-2021-3573 <https://access.redhat.com/security/cve/CVE-2021-3573>
kernel: use-after-free in function hci_sock_bound_ioctl()
-
CVE-2021-29155 <https://access.redhat.com/security/cve/CVE-2021-29155>
kernel: protection for sequences of pointer arithmetic operations against
speculatively out-of-bounds loads can be bypassed to leak content of kernel
memory
-
CVE-2021-31829 <https://access.redhat.com/security/cve/CVE-2021-31829>
kernel: protection of stack pointer against speculative pointer arithmetic
can be bypassed to leak content of kernel memory
-
CVE-2021-33200 <https://access.redhat.com/security/cve/CVE-2021-33200>
kernel: out-of-bounds reads and writes due to enforcing incorrect limits
for pointer arithmetic operations by BPF verifier
-
CVE-2021-3679 <https://access.redhat.com/security/cve/CVE-2021-3679>
kernel: DoS in rb_per_cpu_empty()
-
CVE-2020-26144 <https://access.redhat.com/security/cve/CVE-2020-26144>
kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header
-
CVE-2020-26145 <https://access.redhat.com/security/cve/CVE-2020-26145>
kernel: accepting plaintext broadcast fragments as full frames
-
CVE-2020-24587 <https://access.redhat.com/security/cve/CVE-2020-24587>
kernel: Reassembling fragments encrypted under different keys
-
CVE-2020-26141 <https://access.redhat.com/security/cve/CVE-2020-26141>
kernel: not verifying TKIP MIC of fragmented frames
-
CVE-2020-24586 <https://access.redhat.com/security/cve/CVE-2020-24586>
kernel: Fragmentation cache not cleared on reconnection
-
CVE-2020-26147 <https://access.redhat.com/security/cve/CVE-2020-26147>
kernel: reassembling mixed encrypted/plaintext fragments
-
CVE-2021-3653 <https://access.redhat.com/security/cve/CVE-2021-3653>
kernel: SVM nested virtualization issue in KVM (AVIC support)
-
CVE-2021-3656 <https://access.redhat.com/security/cve/CVE-2021-3656>
kernel: SVM nested virtualization issue in KVM (VMLOAD/VMSAVE)
Here’s the full list of changes:
--- ovirt-node-ng-image-4.4.8.1.manifest-rpm 2021-08-27 08:11:54.863736688
+0200
+++ ovirt-node-ng-image-4.4.8.2.manifest-rpm 2021-09-01 12:59:05.195037688
+0200
@@ -3,6 +3,6 @@
-NetworkManager-1.32.8-1.el8.x86_64
-NetworkManager-config-server-1.32.8-1.el8.noarch
-NetworkManager-libnm-1.32.8-1.el8.x86_64
-NetworkManager-ovs-1.32.8-1.el8.x86_64
-NetworkManager-team-1.32.8-1.el8.x86_64
-NetworkManager-tui-1.32.8-1.el8.x86_64
+NetworkManager-1.32.10-2.el8.x86_64
+NetworkManager-config-server-1.32.10-2.el8.noarch
+NetworkManager-libnm-1.32.10-2.el8.x86_64
+NetworkManager-ovs-1.32.10-2.el8.x86_64
+NetworkManager-team-1.32.10-2.el8.x86_64
+NetworkManager-tui-1.32.10-2.el8.x86_64
@@ -24 +24 @@
-ansible-2.9.24-2.el8.noarch
+ansible-2.9.25-1.el8.noarch
@@ -39,5 +39,5 @@
-bind-export-libs-9.11.26-4.el8_4.x86_64
-bind-libs-9.11.26-4.el8_4.x86_64
-bind-libs-lite-9.11.26-4.el8_4.x86_64
-bind-license-9.11.26-4.el8_4.noarch
-bind-utils-9.11.26-4.el8_4.x86_64
+bind-export-libs-9.11.26-6.el8.x86_64
+bind-libs-9.11.26-6.el8.x86_64
+bind-libs-lite-9.11.26-6.el8.x86_64
+bind-license-9.11.26-6.el8.noarch
+bind-utils-9.11.26-6.el8.x86_64
@@ -46 +46 @@
-blivet-data-3.4.0-4.el8.noarch
+blivet-data-3.4.0-5.el8.noarch
@@ -68,2 +68,2 @@
-cockpit-250-1.el8.x86_64
-cockpit-bridge-250-1.el8.x86_64
+cockpit-251-1.el8.x86_64
+cockpit-bridge-251-1.el8.x86_64
@@ -71,3 +71,3 @@
-cockpit-storaged-250-1.el8.noarch
-cockpit-system-250-1.el8.noarch
-cockpit-ws-250-1.el8.x86_64
+cockpit-storaged-251-1.el8.noarch
+cockpit-system-251-1.el8.noarch
+cockpit-ws-251-1.el8.x86_64
@@ -94 +94 @@
-curl-7.61.1-18.el8_4.1.x86_64
+curl-7.61.1-21.el8.x86_64
@@ -118,2 +118,2 @@
-dnf-4.7.0-2.el8.noarch
-dnf-data-4.7.0-2.el8.noarch
+dnf-4.7.0-3.el8.noarch
+dnf-data-4.7.0-3.el8.noarch
@@ -123,5 +123,5 @@
-dracut-049-188.git20210802.el8.x86_64
-dracut-config-generic-049-188.git20210802.el8.x86_64
-dracut-live-049-188.git20210802.el8.x86_64
-dracut-network-049-188.git20210802.el8.x86_64
-dracut-squash-049-188.git20210802.el8.x86_64
+dracut-049-190.git20210811.el8.x86_64
+dracut-config-generic-049-190.git20210811.el8.x86_64
+dracut-live-049-190.git20210811.el8.x86_64
+dracut-network-049-190.git20210811.el8.x86_64
+dracut-squash-049-190.git20210811.el8.x86_64
@@ -138 +138 @@
-ethtool-5.8-6.el8.x86_64
+ethtool-5.8-7.el8.x86_64
@@ -184 +184 @@
-fontconfig-2.13.1-3.el8.x86_64
+fontconfig-2.13.1-4.el8.x86_64
@@ -188 +188 @@
-fstrm-0.6.0-3.el8.1.x86_64
+fstrm-0.6.1-2.el8.x86_64
@@ -206,3 +206,3 @@
-glibc-2.28-162.el8.x86_64
-glibc-common-2.28-162.el8.x86_64
-glibc-langpack-en-2.28-162.el8.x86_64
+glibc-2.28-164.el8.x86_64
+glibc-common-2.28-164.el8.x86_64
+glibc-langpack-en-2.28-164.el8.x86_64
@@ -240 +240 @@
-grubby-8.40-41.el8.x86_64
+grubby-8.40-42.el8.x86_64
@@ -249 +249 @@
-hivex-1.3.18-21.module_el8.5.0+821+97472045.x86_64
+hivex-1.3.18-22.el8s.x86_64
@@ -251 +251 @@
-hwdata-0.314-8.9.el8.noarch
+hwdata-0.314-8.10.el8.noarch
@@ -265,2 +265,2 @@
-iproute-5.12.0-2.el8.x86_64
-iproute-tc-5.12.0-2.el8.x86_64
+iproute-5.12.0-3.el8.x86_64
+iproute-tc-5.12.0-3.el8.x86_64
@@ -270,3 +270,3 @@
-iptables-1.8.4-19.el8.x86_64
-iptables-ebtables-1.8.4-19.el8.x86_64
-iptables-libs-1.8.4-19.el8.x86_64
+iptables-1.8.4-20.el8.x86_64
+iptables-ebtables-1.8.4-20.el8.x86_64
+iptables-libs-1.8.4-20.el8.x86_64
@@ -301,6 +301,6 @@
-kernel-4.18.0-331.el8.x86_64
-kernel-core-4.18.0-331.el8.x86_64
-kernel-modules-4.18.0-331.el8.x86_64
-kernel-tools-4.18.0-331.el8.x86_64
-kernel-tools-libs-4.18.0-331.el8.x86_64
-kexec-tools-2.0.20-56.el8.x86_64
+kernel-4.18.0-338.el8.x86_64
+kernel-core-4.18.0-338.el8.x86_64
+kernel-modules-4.18.0-338.el8.x86_64
+kernel-tools-4.18.0-338.el8.x86_64
+kernel-tools-libs-4.18.0-338.el8.x86_64
+kexec-tools-2.0.20-57.el8.x86_64
@@ -313,2 +313,2 @@
-krb5-libs-1.18.2-13.el8.x86_64
-krb5-workstation-1.18.2-13.el8.x86_64
+krb5-libs-1.18.2-14.el8.x86_64
+krb5-workstation-1.18.2-14.el8.x86_64
@@ -318,3 +318,3 @@
-libX11-1.6.8-4.el8.x86_64
-libX11-common-1.6.8-4.el8.noarch
-libX11-xcb-1.6.8-4.el8.x86_64
+libX11-1.6.8-5.el8.x86_64
+libX11-common-1.6.8-5.el8.noarch
+libX11-xcb-1.6.8-5.el8.x86_64
@@ -353 +353 @@
-libbpf-0.3.0-1.el8.x86_64
+libbpf-0.4.0-1.el8.x86_64
@@ -363 +363 @@
-libcurl-7.61.1-18.el8_4.1.x86_64
+libcurl-7.61.1-21.el8.x86_64
@@ -407 +407 @@
-libkadm5-1.18.2-13.el8.x86_64
+libkadm5-1.18.2-14.el8.x86_64
@@ -418 +418 @@
-libmodulemd-2.12.1-1.el8.x86_64
+libmodulemd-2.13.0-1.el8.x86_64
@@ -465 +465 @@
-libsepol-2.9-2.el8.x86_64
+libsepol-2.9-3.el8.x86_64
@@ -503,24 +503,24 @@
-libvirt-7.5.0-1.el8s.x86_64
-libvirt-client-7.5.0-1.el8s.x86_64
-libvirt-daemon-7.5.0-1.el8s.x86_64
-libvirt-daemon-config-network-7.5.0-1.el8s.x86_64
-libvirt-daemon-config-nwfilter-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-interface-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-network-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-nodedev-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-nwfilter-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-qemu-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-secret-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-core-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-disk-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-gluster-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-iscsi-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-iscsi-direct-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-logical-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-mpath-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-rbd-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-scsi-7.5.0-1.el8s.x86_64
-libvirt-daemon-kvm-7.5.0-1.el8s.x86_64
-libvirt-libs-7.5.0-1.el8s.x86_64
-libvirt-lock-sanlock-7.5.0-1.el8s.x86_64
+libvirt-7.6.0-2.el8s.x86_64
+libvirt-client-7.6.0-2.el8s.x86_64
+libvirt-daemon-7.6.0-2.el8s.x86_64
+libvirt-daemon-config-network-7.6.0-2.el8s.x86_64
+libvirt-daemon-config-nwfilter-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-interface-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-network-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-nodedev-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-nwfilter-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-qemu-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-secret-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-core-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-disk-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-gluster-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-iscsi-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-iscsi-direct-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-logical-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-mpath-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-rbd-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-scsi-7.6.0-2.el8s.x86_64
+libvirt-daemon-kvm-7.6.0-2.el8s.x86_64
+libvirt-libs-7.6.0-2.el8s.x86_64
+libvirt-lock-sanlock-7.6.0-2.el8s.x86_64
@@ -546,2 +546,2 @@
-lldpad-1.0.1-14.git036e314.el8.x86_64
-llvm-libs-12.0.0-1.module_el8.5.0+840+21214faf.x86_64
+lldpad-1.0.1-16.git036e314.el8.x86_64
+llvm-libs-12.0.1-1.module_el8.5.0+892+54d791e1.x86_64
@@ -553 +553 @@
-lsscsi-0.32-2.el8.x86_64
+lsscsi-0.32-3.el8.x86_64
@@ -555 +555 @@
-lua-libs-5.3.4-11.el8.x86_64
+lua-libs-5.3.4-12.el8.x86_64
@@ -603 +603 @@
-nftables-0.9.3-20.el8.x86_64
+nftables-0.9.3-21.el8.x86_64
@@ -605 +605 @@
-nmap-ncat-7.70-5.el8.x86_64
+nmap-ncat-7.70-6.el8.x86_64
@@ -609 +609 @@
-nspr-4.31.0-1.el8_4.x86_64
+nspr-4.32.0-1.el8_4.x86_64
@@ -636 +636 @@
-os-prober-1.74-6.el8.x86_64
+os-prober-1.74-9.el8.x86_64
@@ -648 +648 @@
-ovirt-node-ng-image-update-placeholder-4.4.8.1-1.el8.noarch
+ovirt-node-ng-image-update-placeholder-4.4.8.2-1.el8.noarch
@@ -656,2 +656,2 @@
-ovirt-release-host-node-4.4.8.1-1.el8.noarch
-ovirt-release44-4.4.8.1-1.el8.noarch
+ovirt-release-host-node-4.4.8.2-1.el8.noarch
+ovirt-release44-4.4.8.2-1.el8.noarch
@@ -664,3 +664,3 @@
-pacemaker-cluster-libs-2.1.0-6.el8.x86_64
-pacemaker-libs-2.1.0-6.el8.x86_64
-pacemaker-schemas-2.1.0-6.el8.noarch
+pacemaker-cluster-libs-2.1.0-8.el8.x86_64
+pacemaker-libs-2.1.0-8.el8.x86_64
+pacemaker-schemas-2.1.0-8.el8.noarch
@@ -715 +715 @@
-platform-python-3.6.8-39.el8.x86_64
+platform-python-3.6.8-40.el8.x86_64
@@ -718,3 +718,3 @@
-plymouth-0.9.4-9.20200615git1e36e30.el8.x86_64
-plymouth-core-libs-0.9.4-9.20200615git1e36e30.el8.x86_64
-plymouth-scripts-0.9.4-9.20200615git1e36e30.el8.x86_64
+plymouth-0.9.4-10.20200615git1e36e30.el8.x86_64
+plymouth-core-libs-0.9.4-10.20200615git1e36e30.el8.x86_64
+plymouth-scripts-0.9.4-10.20200615git1e36e30.el8.x86_64
@@ -744,2 +744,2 @@
-python3-bind-9.11.26-4.el8_4.noarch
-python3-blivet-3.4.0-4.el8.noarch
+python3-bind-9.11.26-6.el8.noarch
+python3-blivet-3.4.0-5.el8.noarch
@@ -753 +753 @@
-python3-cloud-what-1.28.20-1.el8.x86_64
+python3-cloud-what-1.28.21-2.el8.x86_64
@@ -762 +762 @@
-python3-dnf-4.7.0-2.el8.noarch
+python3-dnf-4.7.0-3.el8.noarch
@@ -797 +797 @@
-python3-libs-3.6.8-39.el8.x86_64
+python3-libs-3.6.8-40.el8.x86_64
@@ -800 +800 @@
-python3-libvirt-7.5.0-1.el8s.x86_64
+python3-libvirt-7.6.0-1.el8s.x86_64
@@ -811 +811 @@
-python3-nftables-0.9.3-20.el8.x86_64
+python3-nftables-0.9.3-21.el8.x86_64
@@ -834 +834 @@
-python3-perf-4.18.0-331.el8.x86_64
+python3-perf-4.18.0-338.el8.x86_64
@@ -864 +864 @@
-python3-rpm-4.14.3-15.el8.x86_64
+python3-rpm-4.14.3-18.el8.x86_64
@@ -876 +876 @@
-python3-subscription-manager-rhsm-1.28.20-1.el8.x86_64
+python3-subscription-manager-rhsm-1.28.21-2.el8.x86_64
@@ -878 +878 @@
-python3-syspurpose-1.28.20-1.el8.x86_64
+python3-syspurpose-1.28.21-2.el8.x86_64
@@ -889,15 +889,15 @@
-python36-3.6.8-37.module_el8.5.0+771+e5d9a225.x86_64
-qemu-guest-agent-6.0.0-26.el8s.x86_64
-qemu-img-6.0.0-26.el8s.x86_64
-qemu-kvm-6.0.0-26.el8s.x86_64
-qemu-kvm-block-curl-6.0.0-26.el8s.x86_64
-qemu-kvm-block-gluster-6.0.0-26.el8s.x86_64
-qemu-kvm-block-iscsi-6.0.0-26.el8s.x86_64
-qemu-kvm-block-rbd-6.0.0-26.el8s.x86_64
-qemu-kvm-block-ssh-6.0.0-26.el8s.x86_64
-qemu-kvm-common-6.0.0-26.el8s.x86_64
-qemu-kvm-core-6.0.0-26.el8s.x86_64
-qemu-kvm-docs-6.0.0-26.el8s.x86_64
-qemu-kvm-hw-usbredir-6.0.0-26.el8s.x86_64
-qemu-kvm-ui-opengl-6.0.0-26.el8s.x86_64
-qemu-kvm-ui-spice-6.0.0-26.el8s.x86_64
+python36-3.6.8-38.module_el8.5.0+895+a459eca8.x86_64
+qemu-guest-agent-6.0.0-27.el8s.x86_64
+qemu-img-6.0.0-27.el8s.x86_64
+qemu-kvm-6.0.0-27.el8s.x86_64
+qemu-kvm-block-curl-6.0.0-27.el8s.x86_64
+qemu-kvm-block-gluster-6.0.0-27.el8s.x86_64
+qemu-kvm-block-iscsi-6.0.0-27.el8s.x86_64
+qemu-kvm-block-rbd-6.0.0-27.el8s.x86_64
+qemu-kvm-block-ssh-6.0.0-27.el8s.x86_64
+qemu-kvm-common-6.0.0-27.el8s.x86_64
+qemu-kvm-core-6.0.0-27.el8s.x86_64
+qemu-kvm-docs-6.0.0-27.el8s.x86_64
+qemu-kvm-hw-usbredir-6.0.0-27.el8s.x86_64
+qemu-kvm-ui-opengl-6.0.0-27.el8s.x86_64
+qemu-kvm-ui-spice-6.0.0-27.el8s.x86_64
@@ -912,4 +912,4 @@
-rpm-4.14.3-15.el8.x86_64
-rpm-build-libs-4.14.3-15.el8.x86_64
-rpm-libs-4.14.3-15.el8.x86_64
-rpm-plugin-selinux-4.14.3-15.el8.x86_64
+rpm-4.14.3-18.el8.x86_64
+rpm-build-libs-4.14.3-18.el8.x86_64
+rpm-libs-4.14.3-18.el8.x86_64
+rpm-plugin-selinux-4.14.3-18.el8.x86_64
@@ -928,3 +928,3 @@
-sbd-1.4.2-2.el8.x86_64
-scap-security-guide-0.1.57-1.el8.noarch
-scrub-2.5.2-14.el8.x86_64
+sbd-1.5.0-2.el8.x86_64
+scap-security-guide-0.1.57-4.el8.noarch
+scrub-2.5.2-16.el8.x86_64
@@ -934,2 +934,2 @@
-selinux-policy-3.14.3-76.el8.noarch
-selinux-policy-targeted-3.14.3-76.el8.noarch
+selinux-policy-3.14.3-78.el8.noarch
+selinux-policy-targeted-3.14.3-78.el8.noarch
@@ -961 +961 @@
-subscription-manager-rhsm-certificates-1.28.20-1.el8.x86_64
+subscription-manager-rhsm-certificates-1.28.21-2.el8.x86_64
@@ -973,5 +973,5 @@
-systemd-239-49.el8.x86_64
-systemd-container-239-49.el8.x86_64
-systemd-libs-239-49.el8.x86_64
-systemd-pam-239-49.el8.x86_64
-systemd-udev-239-49.el8.x86_64
+systemd-239-50.el8.x86_64
+systemd-container-239-50.el8.x86_64
+systemd-libs-239-50.el8.x86_64
+systemd-pam-239-50.el8.x86_64
+systemd-udev-239-50.el8.x86_64
@@ -993,11 +993,11 @@
-vdo-6.2.5.65-14.el8.x86_64
-vdsm-4.40.80.5-1.el8.x86_64
-vdsm-api-4.40.80.5-1.el8.noarch
-vdsm-client-4.40.80.5-1.el8.noarch
-vdsm-common-4.40.80.5-1.el8.noarch
-vdsm-gluster-4.40.80.5-1.el8.x86_64
-vdsm-http-4.40.80.5-1.el8.noarch
-vdsm-jsonrpc-4.40.80.5-1.el8.noarch
-vdsm-network-4.40.80.5-1.el8.x86_64
-vdsm-python-4.40.80.5-1.el8.noarch
-vdsm-yajsonrpc-4.40.80.5-1.el8.noarch
+vdo-6.2.5.74-14.el8.x86_64
+vdsm-4.40.80.6-1.el8.x86_64
+vdsm-api-4.40.80.6-1.el8.noarch
+vdsm-client-4.40.80.6-1.el8.noarch
+vdsm-common-4.40.80.6-1.el8.noarch
+vdsm-gluster-4.40.80.6-1.el8.x86_64
+vdsm-http-4.40.80.6-1.el8.noarch
+vdsm-jsonrpc-4.40.80.6-1.el8.noarch
+vdsm-network-4.40.80.6-1.el8.x86_64
+vdsm-python-4.40.80.6-1.el8.noarch
+vdsm-yajsonrpc-4.40.80.6-1.el8.noarch
@@ -1021 +1021 @@
-yum-4.7.0-2.el8.noarch
+yum-4.7.0-3.el8.noarch
--
Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
Red Hat EMEA <https://www.redhat.com/>
sbonazzo(a)redhat.com
<https://www.redhat.com/>
*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.*