[ovirt-announce] Fwd: oVirt 4.4.8 is now generally available

Friday, 20 August 2021

---------- Forwarded message ----------
From: *Sandro Bonazzola* <sbonazzo(a)redhat.com&gt;
Date: Thursday, August 19, 2021
Subject: oVirt 4.4.8 is now generally available
To: oVirt Users <users(a)ovirt.org&gt;

oVirt 4.4.8 is now generally available

The oVirt project is excited to announce the general availability of oVirt
4.4.8 , as of August 19th, 2021.

This release unleashes an altogether more powerful and flexible open source
virtualization solution that encompasses hundreds of individual changes and
a wide range of enhancements across the engine, storage, network, user
interface, and analytics, as compared to oVirt 4.3.
Important notes before you install / upgrade

Please note that oVirt 4.4 only supports clusters and data centers with
compatibility version 4.2 and above. If clusters or data centers are
running with an older compatibility version, you need to upgrade them to at
least 4.2 (4.3 is recommended).

Please note that in RHEL 8 / CentOS 8 several devices that worked on EL7
are no longer supported.

For example, the megaraid_sas driver is removed. If you use Enterprise
Linux 8 hosts you can try to provide the necessary drivers for the
deprecated hardware using the DUD method (See the users’ mailing list
thread on this at https://lists.ovirt.org/archives/list/users@ovirt.org/
thread/NDSVUZSESOXEFJNPHOXUH4HOOWRIRSB4/ )

Documentation

   -

   If you want to try oVirt as quickly as possible, follow the instructions
   on the Download <https://ovirt.org/download/> page.
   -

   For complete installation, administration, and usage instructions, see
   the oVirt Documentation <https://ovirt.org/documentation/>;.
   -

   For upgrading from a previous version, see the oVirt Upgrade Guide
   <https://ovirt.org/documentation/upgrade_guide/>;.
   -

   For a general overview of oVirt, see About oVirt
   <https://ovirt.org/community/about.html>;.

What’s new in oVirt 4.4.8 Release?

This update is the eighth in a series of stabilization updates to the 4.4
series.

This release is available now on x86_64 architecture for:

   -

   Red Hat Enterprise Linux 8.4
   -

   CentOS Linux (or similar) 8.4
   -

   CentOS Stream 8

This release supports Hypervisor Hosts on x86_64 and ppc64le architectures
for:

   -

   Red Hat Enterprise Linux 8.4
   -

   CentOS Linux (or similar) 8.4
   -

   oVirt Node NG (based on CentOS Stream 8)
   -

   CentOS Stream 8

Some of the RFEs with high user impact are listed below:

   -

   Bug 1691696 <https://bugzilla.redhat.com/show_bug.cgi?id=1691696> -
   [RFE] multipath events notifications
   -

   Bug 1939286 <https://bugzilla.redhat.com/show_bug.cgi?id=1939286> -
   [RFE] Expose broken Affinity Groups via API too
   -

   Bug 1963083 <https://bugzilla.redhat.com/show_bug.cgi?id=1963083> -
   [RFE] Support storing user data in VM checkpoint entity
   -

   Bug 1971185 <https://bugzilla.redhat.com/show_bug.cgi?id=1971185> -
   [RFE] Report zero status in dirty extents response
   -

   Bug 1981297 <https://bugzilla.redhat.com/show_bug.cgi?id=1981297> -
   [RFE] Add new backup phases and disable backup/image transfers DB instant
   cleanup
   -

   Bug 1971317 <https://bugzilla.redhat.com/show_bug.cgi?id=1971317> -
   [RFE][API] Import OVA template as a clone
   -

   Bug 1941507 <https://bugzilla.redhat.com/show_bug.cgi?id=1941507> -
   [RFE] Implement rotation mechanism for /var/log/ovirt-engine/host-deploy
   -

   Bug 1962563 <https://bugzilla.redhat.com/show_bug.cgi?id=1962563> -
   [RFE] Use nmstate for source routing

Some of the Bugs with high user impact are listed below:

   -

   Bug 1770027 <https://bugzilla.redhat.com/show_bug.cgi?id=1770027> - Live
   Merge completed on the host, but not on the engine, which just waited for
   it to complete until the operation was terminated.
   -

   Bug 1977689 <https://bugzilla.redhat.com/show_bug.cgi?id=1977689> -
   Download backup disk command failes in sdk/examples/backup_vm.py
   -

   Bug 1987295 <https://bugzilla.redhat.com/show_bug.cgi?id=1987295> -
   Setting host to 'maintenance' will be blocked when there are image
   transfers with status different then 'paused'
   -

   Bug 1983414 <https://bugzilla.redhat.com/show_bug.cgi?id=1983414> -
   Disks are locked forever when copying VMs' disks after snapshot
   -

   Bug 1982065 <https://bugzilla.redhat.com/show_bug.cgi?id=1982065> -
   Invalid amount of memory is allowed to be hot plugged
   -

   Bug 1966535 <https://bugzilla.redhat.com/show_bug.cgi?id=1966535> -
   NullPointerException when trying to delete uploaded disks with using
   transfer_url
   -

   Bug 1985876 <https://bugzilla.redhat.com/show_bug.cgi?id=1985876> -
   Cannot set 0.0.0.0 as gateway
   -

   Bug 1932392 <https://bugzilla.redhat.com/show_bug.cgi?id=1932392> -
   engine-setup fails after 'engine-backup --mode=restore' if the backup was
   taken on a newer version
   -

   Bug 1989794 <https://bugzilla.redhat.com/show_bug.cgi?id=1989794> -
   engine still generates duplicate address for hotplug disk

oVirt Node and Appliance have been updated, including:

   -

   oVirt 4.4.8: https://www.ovirt.org/release/4.4.8/
   -

   CentOS Stream 8 latest updates
   -

   Ansible 2.9.24: https://github.com/ansible/ansible/blob/stable-2.9/
   changelogs/CHANGELOG-v2.9.rst#v2-9-24

<https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v...

We also included updates for the following CVEs:

cockpit-ovirt:

   -

   CVE-2020-28500 <https://access.redhat.com/security/cve/CVE-2020-28500> -
   Moderate - nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions
   -

   CVE-2021-23337 <https://access.redhat.com/security/cve/CVE-2021-23337> -
   Moderate - nodejs-lodash: command injection via template

oVirt Node consumed fixes for:

   -

   CVE-2021-3621 <https://access.redhat.com/security/cve/CVE-2021-3621>   -
   Important - sssd: shell command injection in sssctl
   -

   CVE-2021-33034 <https://access.redhat.com/security/cve/CVE-2021-33034> -
   Important - kernel: use-after-free in net/bluetooth/hci_event.c when
   destroying an hci_chan
   -

   CVE-2021-3501 <https://access.redhat.com/security/cve/CVE-2021-3501>   -
   Important - kernel: userspace applications can misuse the KVM API to cause
   a write of 16 bytes at an offset up to 32 GB from vcpu->run
   -

   CVE-2021-3609 <https://access.redhat.com/security/cve/CVE-2021-3609>  -
   Important - kernel: race condition in net/can/bcm.c leads to local
   privilege escalation
   -

   CVE-2021-25217 <https://access.redhat.com/security/cve/CVE-2021-25217> -
   Important -  dhcp: stack-based buffer overflow when parsing statements with
   colon-separated hex digits in config or lease files in dhcpd and dhclient
   -

   CVE-2021-3623 <https://access.redhat.com/security/cve/CVE-2021-3623> -
   Moderate - libtpms: out-of-bounds access when trying to resume the state of
   the vTPM
   -

   CVE-2021-3565 <https://access.redhat.com/security/cve/CVE-2021-3565> -
   Moderate - tpm2-tools: fixed AES wrapping key in tpm2_import
   -

   CVE-2021-3580 <https://access.redhat.com/security/cve/CVE-2021-3580> -
   Moderate - nettle: Remote crash in RSA decryption via manipulated
   ciphertext
   -

   CVE-2021-36222 <https://access.redhat.com/security/cve/CVE-2021-36222> -
   Moderate - krb5: sending a request containing a PA-ENCRYPTED-CHALLENGE
   padata element without using FAST could result in null dereference in the
   KDC which leads to DoS
   -

   CVE-2020-24504 <https://access.redhat.com/security/cve/CVE-2020-24504> -
   Moderate -  kernel: Uncontrolled resource consumption in some Intel(R)
   Ethernet E810 Adapter drivers
   -

   CVE-2020-24503 <https://access.redhat.com/security/cve/CVE-2020-24503> -
   Moderate - kernel: Insufficient access control in some Intel(R) Ethernet
   E810 Adapter drivers
   -

   CVE-2020-24502 <https://access.redhat.com/security/cve/CVE-2020-24502> -
   Moderate - kernel: Improper input validation in some Intel(R) Ethernet E810
   Adapter drivers
   -

   CVE-2021-35942 <https://access.redhat.com/security/cve/CVE-2021-35942> -
   Moderate - glibc: Arbitrary read in wordexp()
   -

   CVE-2021-3448 <https://access.redhat.com/security/cve/CVE-2021-3448> -
   Moderate - dnsmasq: fixed outgoing port used when --server is used with an
   interface name
   -

   CVE-2021-20266 <https://access.redhat.com/security/cve/CVE-2021-20266> -
   Low - rpm: missing length checks in hdrblobInit()
   -

   CVE-2020-29368 <https://access.redhat.com/security/cve/CVE-2020-29368> -
   Low - kernel: the copy-on-write implementation can grant unintended write
   access because of a race condition in a THP mapcount check

See the release notes [1] for installation instructions and a list of new
features and bugs fixed.

Notes:

   -

   oVirt Appliance is already available for CentOS Stream 8
   -

   oVirt Node NG is already available for CentOS Stream 8

Additional resources:

   -

   Read more about the oVirt 4.4.8 release highlights:
   https://www.ovirt.org/release/4.4.8/
   <https://www.ovirt.org/release/4.4.8/>
   -

   Get more oVirt project updates on Twitter: https://twitter.com/ovirt
   -

   Check out the latest project news on the oVirt blog:
   https://blogs.ovirt.org/

[1] https://www.ovirt.org/release/4.4.8/
[2] https://resources.ovirt.org/pub/ovirt-4.4/iso/

-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA <https://www.redhat.com/>

sbonazzo(a)redhat.com
<https://www.redhat.com/>

*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.*

-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA <https://www.redhat.com/>

sbonazzo(a)redhat.com
<https://www.redhat.com/>

*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
<https://mojo.redhat.com/docs/DOC-1199578>*

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

[ovirt-announce] Fwd: oVirt 4.4.8 is now generally available