Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
 |
Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.
oVirt Node 4.4.8.2 Async update
On September 1st 2021 the oVirt project released an async update for oVirt Node consuming the following packages:
ovirt-release44 4.4.8.2
vdsm 4.40.80.6
oVirt Node respin also consumed most recent CentOS Stream and Advanced Virtualization content.
It also includes fixes for:
CVE-2021-31535 libX11: missing request length checks
CVE-2021-3564 kernel: double free in bluetooth subsystem when the HCI device initialization fails
CVE-2021-3573 kernel: use-after-free in function hci_sock_bound_ioctl()
CVE-2021-29155 kernel: protection for sequences of pointer arithmetic operations against speculatively out-of-bounds loads can be bypassed to leak content of kernel memory
CVE-2021-31829 kernel: protection of stack pointer against speculative pointer arithmetic can be bypassed to leak content of kernel memory
CVE-2021-33200 kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations by BPF verifier
CVE-2021-3679 kernel: DoS in rb_per_cpu_empty()
CVE-2020-26144 kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header
CVE-2020-26145 kernel: accepting plaintext broadcast fragments as full frames
CVE-2020-24587 kernel: Reassembling fragments encrypted under different keys
CVE-2020-26141 kernel: not verifying TKIP MIC of fragmented frames
CVE-2020-24586 kernel: Fragmentation cache not cleared on reconnection
CVE-2020-26147 kernel: reassembling mixed encrypted/plaintext fragments
CVE-2021-3653 kernel: SVM nested virtualization issue in KVM (AVIC support)
CVE-2021-3656 kernel: SVM nested virtualization issue in KVM (VMLOAD/VMSAVE)
Here’s the full list of changes:
--- ovirt-node-ng-image-4.4.8.1.manifest-rpm 2021-08-27 08:11:54.863736688 +0200
+++ ovirt-node-ng-image-4.4.8.2.manifest-rpm 2021-09-01 12:59:05.195037688 +0200
@@ -3,6 +3,6 @@
-NetworkManager-1.32.8-1.el8.x86_64
-NetworkManager-config-server-1.32.8-1.el8.noarch
-NetworkManager-libnm-1.32.8-1.el8.x86_64
-NetworkManager-ovs-1.32.8-1.el8.x86_64
-NetworkManager-team-1.32.8-1.el8.x86_64
-NetworkManager-tui-1.32.8-1.el8.x86_64
+NetworkManager-1.32.10-2.el8.x86_64
+NetworkManager-config-server-1.32.10-2.el8.noarch
+NetworkManager-libnm-1.32.10-2.el8.x86_64
+NetworkManager-ovs-1.32.10-2.el8.x86_64
+NetworkManager-team-1.32.10-2.el8.x86_64
+NetworkManager-tui-1.32.10-2.el8.x86_64
@@ -24 +24 @@
-ansible-2.9.24-2.el8.noarch
+ansible-2.9.25-1.el8.noarch
@@ -39,5 +39,5 @@
-bind-export-libs-9.11.26-4.el8_4.x86_64
-bind-libs-9.11.26-4.el8_4.x86_64
-bind-libs-lite-9.11.26-4.el8_4.x86_64
-bind-license-9.11.26-4.el8_4.noarch
-bind-utils-9.11.26-4.el8_4.x86_64
+bind-export-libs-9.11.26-6.el8.x86_64
+bind-libs-9.11.26-6.el8.x86_64
+bind-libs-lite-9.11.26-6.el8.x86_64
+bind-license-9.11.26-6.el8.noarch
+bind-utils-9.11.26-6.el8.x86_64
@@ -46 +46 @@
-blivet-data-3.4.0-4.el8.noarch
+blivet-data-3.4.0-5.el8.noarch
@@ -68,2 +68,2 @@
-cockpit-250-1.el8.x86_64
-cockpit-bridge-250-1.el8.x86_64
+cockpit-251-1.el8.x86_64
+cockpit-bridge-251-1.el8.x86_64
@@ -71,3 +71,3 @@
-cockpit-storaged-250-1.el8.noarch
-cockpit-system-250-1.el8.noarch
-cockpit-ws-250-1.el8.x86_64
+cockpit-storaged-251-1.el8.noarch
+cockpit-system-251-1.el8.noarch
+cockpit-ws-251-1.el8.x86_64
@@ -94 +94 @@
-curl-7.61.1-18.el8_4.1.x86_64
+curl-7.61.1-21.el8.x86_64
@@ -118,2 +118,2 @@
-dnf-4.7.0-2.el8.noarch
-dnf-data-4.7.0-2.el8.noarch
+dnf-4.7.0-3.el8.noarch
+dnf-data-4.7.0-3.el8.noarch
@@ -123,5 +123,5 @@
-dracut-049-188.git20210802.el8.x86_64
-dracut-config-generic-049-188.git20210802.el8.x86_64
-dracut-live-049-188.git20210802.el8.x86_64
-dracut-network-049-188.git20210802.el8.x86_64
-dracut-squash-049-188.git20210802.el8.x86_64
+dracut-049-190.git20210811.el8.x86_64
+dracut-config-generic-049-190.git20210811.el8.x86_64
+dracut-live-049-190.git20210811.el8.x86_64
+dracut-network-049-190.git20210811.el8.x86_64
+dracut-squash-049-190.git20210811.el8.x86_64
@@ -138 +138 @@
-ethtool-5.8-6.el8.x86_64
+ethtool-5.8-7.el8.x86_64
@@ -184 +184 @@
-fontconfig-2.13.1-3.el8.x86_64
+fontconfig-2.13.1-4.el8.x86_64
@@ -188 +188 @@
-fstrm-0.6.0-3.el8.1.x86_64
+fstrm-0.6.1-2.el8.x86_64
@@ -206,3 +206,3 @@
-glibc-2.28-162.el8.x86_64
-glibc-common-2.28-162.el8.x86_64
-glibc-langpack-en-2.28-162.el8.x86_64
+glibc-2.28-164.el8.x86_64
+glibc-common-2.28-164.el8.x86_64
+glibc-langpack-en-2.28-164.el8.x86_64
@@ -240 +240 @@
-grubby-8.40-41.el8.x86_64
+grubby-8.40-42.el8.x86_64
@@ -249 +249 @@
-hivex-1.3.18-21.module_el8.5.0+821+97472045.x86_64
+hivex-1.3.18-22.el8s.x86_64
@@ -251 +251 @@
-hwdata-0.314-8.9.el8.noarch
+hwdata-0.314-8.10.el8.noarch
@@ -265,2 +265,2 @@
-iproute-5.12.0-2.el8.x86_64
-iproute-tc-5.12.0-2.el8.x86_64
+iproute-5.12.0-3.el8.x86_64
+iproute-tc-5.12.0-3.el8.x86_64
@@ -270,3 +270,3 @@
-iptables-1.8.4-19.el8.x86_64
-iptables-ebtables-1.8.4-19.el8.x86_64
-iptables-libs-1.8.4-19.el8.x86_64
+iptables-1.8.4-20.el8.x86_64
+iptables-ebtables-1.8.4-20.el8.x86_64
+iptables-libs-1.8.4-20.el8.x86_64
@@ -301,6 +301,6 @@
-kernel-4.18.0-331.el8.x86_64
-kernel-core-4.18.0-331.el8.x86_64
-kernel-modules-4.18.0-331.el8.x86_64
-kernel-tools-4.18.0-331.el8.x86_64
-kernel-tools-libs-4.18.0-331.el8.x86_64
-kexec-tools-2.0.20-56.el8.x86_64
+kernel-4.18.0-338.el8.x86_64
+kernel-core-4.18.0-338.el8.x86_64
+kernel-modules-4.18.0-338.el8.x86_64
+kernel-tools-4.18.0-338.el8.x86_64
+kernel-tools-libs-4.18.0-338.el8.x86_64
+kexec-tools-2.0.20-57.el8.x86_64
@@ -313,2 +313,2 @@
-krb5-libs-1.18.2-13.el8.x86_64
-krb5-workstation-1.18.2-13.el8.x86_64
+krb5-libs-1.18.2-14.el8.x86_64
+krb5-workstation-1.18.2-14.el8.x86_64
@@ -318,3 +318,3 @@
-libX11-1.6.8-4.el8.x86_64
-libX11-common-1.6.8-4.el8.noarch
-libX11-xcb-1.6.8-4.el8.x86_64
+libX11-1.6.8-5.el8.x86_64
+libX11-common-1.6.8-5.el8.noarch
+libX11-xcb-1.6.8-5.el8.x86_64
@@ -353 +353 @@
-libbpf-0.3.0-1.el8.x86_64
+libbpf-0.4.0-1.el8.x86_64
@@ -363 +363 @@
-libcurl-7.61.1-18.el8_4.1.x86_64
+libcurl-7.61.1-21.el8.x86_64
@@ -407 +407 @@
-libkadm5-1.18.2-13.el8.x86_64
+libkadm5-1.18.2-14.el8.x86_64
@@ -418 +418 @@
-libmodulemd-2.12.1-1.el8.x86_64
+libmodulemd-2.13.0-1.el8.x86_64
@@ -465 +465 @@
-libsepol-2.9-2.el8.x86_64
+libsepol-2.9-3.el8.x86_64
@@ -503,24 +503,24 @@
-libvirt-7.5.0-1.el8s.x86_64
-libvirt-client-7.5.0-1.el8s.x86_64
-libvirt-daemon-7.5.0-1.el8s.x86_64
-libvirt-daemon-config-network-7.5.0-1.el8s.x86_64
-libvirt-daemon-config-nwfilter-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-interface-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-network-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-nodedev-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-nwfilter-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-qemu-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-secret-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-core-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-disk-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-gluster-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-iscsi-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-iscsi-direct-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-logical-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-mpath-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-rbd-7.5.0-1.el8s.x86_64
-libvirt-daemon-driver-storage-scsi-7.5.0-1.el8s.x86_64
-libvirt-daemon-kvm-7.5.0-1.el8s.x86_64
-libvirt-libs-7.5.0-1.el8s.x86_64
-libvirt-lock-sanlock-7.5.0-1.el8s.x86_64
+libvirt-7.6.0-2.el8s.x86_64
+libvirt-client-7.6.0-2.el8s.x86_64
+libvirt-daemon-7.6.0-2.el8s.x86_64
+libvirt-daemon-config-network-7.6.0-2.el8s.x86_64
+libvirt-daemon-config-nwfilter-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-interface-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-network-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-nodedev-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-nwfilter-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-qemu-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-secret-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-core-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-disk-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-gluster-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-iscsi-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-iscsi-direct-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-logical-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-mpath-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-rbd-7.6.0-2.el8s.x86_64
+libvirt-daemon-driver-storage-scsi-7.6.0-2.el8s.x86_64
+libvirt-daemon-kvm-7.6.0-2.el8s.x86_64
+libvirt-libs-7.6.0-2.el8s.x86_64
+libvirt-lock-sanlock-7.6.0-2.el8s.x86_64
@@ -546,2 +546,2 @@
-lldpad-1.0.1-14.git036e314.el8.x86_64
-llvm-libs-12.0.0-1.module_el8.5.0+840+21214faf.x86_64
+lldpad-1.0.1-16.git036e314.el8.x86_64
+llvm-libs-12.0.1-1.module_el8.5.0+892+54d791e1.x86_64
@@ -553 +553 @@
-lsscsi-0.32-2.el8.x86_64
+lsscsi-0.32-3.el8.x86_64
@@ -555 +555 @@
-lua-libs-5.3.4-11.el8.x86_64
+lua-libs-5.3.4-12.el8.x86_64
@@ -603 +603 @@
-nftables-0.9.3-20.el8.x86_64
+nftables-0.9.3-21.el8.x86_64
@@ -605 +605 @@
-nmap-ncat-7.70-5.el8.x86_64
+nmap-ncat-7.70-6.el8.x86_64
@@ -609 +609 @@
-nspr-4.31.0-1.el8_4.x86_64
+nspr-4.32.0-1.el8_4.x86_64
@@ -636 +636 @@
-os-prober-1.74-6.el8.x86_64
+os-prober-1.74-9.el8.x86_64
@@ -648 +648 @@
-ovirt-node-ng-image-update-placeholder-4.4.8.1-1.el8.noarch
+ovirt-node-ng-image-update-placeholder-4.4.8.2-1.el8.noarch
@@ -656,2 +656,2 @@
-ovirt-release-host-node-4.4.8.1-1.el8.noarch
-ovirt-release44-4.4.8.1-1.el8.noarch
+ovirt-release-host-node-4.4.8.2-1.el8.noarch
+ovirt-release44-4.4.8.2-1.el8.noarch
@@ -664,3 +664,3 @@
-pacemaker-cluster-libs-2.1.0-6.el8.x86_64
-pacemaker-libs-2.1.0-6.el8.x86_64
-pacemaker-schemas-2.1.0-6.el8.noarch
+pacemaker-cluster-libs-2.1.0-8.el8.x86_64
+pacemaker-libs-2.1.0-8.el8.x86_64
+pacemaker-schemas-2.1.0-8.el8.noarch
@@ -715 +715 @@
-platform-python-3.6.8-39.el8.x86_64
+platform-python-3.6.8-40.el8.x86_64
@@ -718,3 +718,3 @@
-plymouth-0.9.4-9.20200615git1e36e30.el8.x86_64
-plymouth-core-libs-0.9.4-9.20200615git1e36e30.el8.x86_64
-plymouth-scripts-0.9.4-9.20200615git1e36e30.el8.x86_64
+plymouth-0.9.4-10.20200615git1e36e30.el8.x86_64
+plymouth-core-libs-0.9.4-10.20200615git1e36e30.el8.x86_64
+plymouth-scripts-0.9.4-10.20200615git1e36e30.el8.x86_64
@@ -744,2 +744,2 @@
-python3-bind-9.11.26-4.el8_4.noarch
-python3-blivet-3.4.0-4.el8.noarch
+python3-bind-9.11.26-6.el8.noarch
+python3-blivet-3.4.0-5.el8.noarch
@@ -753 +753 @@
-python3-cloud-what-1.28.20-1.el8.x86_64
+python3-cloud-what-1.28.21-2.el8.x86_64
@@ -762 +762 @@
-python3-dnf-4.7.0-2.el8.noarch
+python3-dnf-4.7.0-3.el8.noarch
@@ -797 +797 @@
-python3-libs-3.6.8-39.el8.x86_64
+python3-libs-3.6.8-40.el8.x86_64
@@ -800 +800 @@
-python3-libvirt-7.5.0-1.el8s.x86_64
+python3-libvirt-7.6.0-1.el8s.x86_64
@@ -811 +811 @@
-python3-nftables-0.9.3-20.el8.x86_64
+python3-nftables-0.9.3-21.el8.x86_64
@@ -834 +834 @@
-python3-perf-4.18.0-331.el8.x86_64
+python3-perf-4.18.0-338.el8.x86_64
@@ -864 +864 @@
-python3-rpm-4.14.3-15.el8.x86_64
+python3-rpm-4.14.3-18.el8.x86_64
@@ -876 +876 @@
-python3-subscription-manager-rhsm-1.28.20-1.el8.x86_64
+python3-subscription-manager-rhsm-1.28.21-2.el8.x86_64
@@ -878 +878 @@
-python3-syspurpose-1.28.20-1.el8.x86_64
+python3-syspurpose-1.28.21-2.el8.x86_64
@@ -889,15 +889,15 @@
-python36-3.6.8-37.module_el8.5.0+771+e5d9a225.x86_64
-qemu-guest-agent-6.0.0-26.el8s.x86_64
-qemu-img-6.0.0-26.el8s.x86_64
-qemu-kvm-6.0.0-26.el8s.x86_64
-qemu-kvm-block-curl-6.0.0-26.el8s.x86_64
-qemu-kvm-block-gluster-6.0.0-26.el8s.x86_64
-qemu-kvm-block-iscsi-6.0.0-26.el8s.x86_64
-qemu-kvm-block-rbd-6.0.0-26.el8s.x86_64
-qemu-kvm-block-ssh-6.0.0-26.el8s.x86_64
-qemu-kvm-common-6.0.0-26.el8s.x86_64
-qemu-kvm-core-6.0.0-26.el8s.x86_64
-qemu-kvm-docs-6.0.0-26.el8s.x86_64
-qemu-kvm-hw-usbredir-6.0.0-26.el8s.x86_64
-qemu-kvm-ui-opengl-6.0.0-26.el8s.x86_64
-qemu-kvm-ui-spice-6.0.0-26.el8s.x86_64
+python36-3.6.8-38.module_el8.5.0+895+a459eca8.x86_64
+qemu-guest-agent-6.0.0-27.el8s.x86_64
+qemu-img-6.0.0-27.el8s.x86_64
+qemu-kvm-6.0.0-27.el8s.x86_64
+qemu-kvm-block-curl-6.0.0-27.el8s.x86_64
+qemu-kvm-block-gluster-6.0.0-27.el8s.x86_64
+qemu-kvm-block-iscsi-6.0.0-27.el8s.x86_64
+qemu-kvm-block-rbd-6.0.0-27.el8s.x86_64
+qemu-kvm-block-ssh-6.0.0-27.el8s.x86_64
+qemu-kvm-common-6.0.0-27.el8s.x86_64
+qemu-kvm-core-6.0.0-27.el8s.x86_64
+qemu-kvm-docs-6.0.0-27.el8s.x86_64
+qemu-kvm-hw-usbredir-6.0.0-27.el8s.x86_64
+qemu-kvm-ui-opengl-6.0.0-27.el8s.x86_64
+qemu-kvm-ui-spice-6.0.0-27.el8s.x86_64
@@ -912,4 +912,4 @@
-rpm-4.14.3-15.el8.x86_64
-rpm-build-libs-4.14.3-15.el8.x86_64
-rpm-libs-4.14.3-15.el8.x86_64
-rpm-plugin-selinux-4.14.3-15.el8.x86_64
+rpm-4.14.3-18.el8.x86_64
+rpm-build-libs-4.14.3-18.el8.x86_64
+rpm-libs-4.14.3-18.el8.x86_64
+rpm-plugin-selinux-4.14.3-18.el8.x86_64
@@ -928,3 +928,3 @@
-sbd-1.4.2-2.el8.x86_64
-scap-security-guide-0.1.57-1.el8.noarch
-scrub-2.5.2-14.el8.x86_64
+sbd-1.5.0-2.el8.x86_64
+scap-security-guide-0.1.57-4.el8.noarch
+scrub-2.5.2-16.el8.x86_64
@@ -934,2 +934,2 @@
-selinux-policy-3.14.3-76.el8.noarch
-selinux-policy-targeted-3.14.3-76.el8.noarch
+selinux-policy-3.14.3-78.el8.noarch
+selinux-policy-targeted-3.14.3-78.el8.noarch
@@ -961 +961 @@
-subscription-manager-rhsm-certificates-1.28.20-1.el8.x86_64
+subscription-manager-rhsm-certificates-1.28.21-2.el8.x86_64
@@ -973,5 +973,5 @@
-systemd-239-49.el8.x86_64
-systemd-container-239-49.el8.x86_64
-systemd-libs-239-49.el8.x86_64
-systemd-pam-239-49.el8.x86_64
-systemd-udev-239-49.el8.x86_64
+systemd-239-50.el8.x86_64
+systemd-container-239-50.el8.x86_64
+systemd-libs-239-50.el8.x86_64
+systemd-pam-239-50.el8.x86_64
+systemd-udev-239-50.el8.x86_64
@@ -993,11 +993,11 @@
-vdo-6.2.5.65-14.el8.x86_64
-vdsm-4.40.80.5-1.el8.x86_64
-vdsm-api-4.40.80.5-1.el8.noarch
-vdsm-client-4.40.80.5-1.el8.noarch
-vdsm-common-4.40.80.5-1.el8.noarch
-vdsm-gluster-4.40.80.5-1.el8.x86_64
-vdsm-http-4.40.80.5-1.el8.noarch
-vdsm-jsonrpc-4.40.80.5-1.el8.noarch
-vdsm-network-4.40.80.5-1.el8.x86_64
-vdsm-python-4.40.80.5-1.el8.noarch
-vdsm-yajsonrpc-4.40.80.5-1.el8.noarch
+vdo-6.2.5.74-14.el8.x86_64
+vdsm-4.40.80.6-1.el8.x86_64
+vdsm-api-4.40.80.6-1.el8.noarch
+vdsm-client-4.40.80.6-1.el8.noarch
+vdsm-common-4.40.80.6-1.el8.noarch
+vdsm-gluster-4.40.80.6-1.el8.x86_64
+vdsm-http-4.40.80.6-1.el8.noarch
+vdsm-jsonrpc-4.40.80.6-1.el8.noarch
+vdsm-network-4.40.80.6-1.el8.x86_64
+vdsm-python-4.40.80.6-1.el8.noarch
+vdsm-yajsonrpc-4.40.80.6-1.el8.noarch
@@ -1021 +1021 @@
-yum-4.7.0-2.el8.noarch
+yum-4.7.0-3.el8.noarch
Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
|