oVirt 4.5.0 is now generally available

oVirt 4.5.0 is now generally available The oVirt project is excited to announce the general availability of oVirt 4.5.0, as of April, 20th 2022. This release unleashes an altogether more powerful and flexible open source virtualization solution that encompasses hundreds of individual changes and a wide range of enhancements across the engine, storage, network, user interface, and analytics on top of oVirt 4.4. Important notes before you install / upgrade Some of the features included in oVirt 4.5.0 require content that will be available in RHEL 8.6 and derivatives which are currently included in CentOS Stream 8. NOTE: If you’re going to install oVirt 4.5.0 on RHEL 8.6 beta please read Installing on RHEL <http://localhost:4000/download/install_on_rhel.html> first. Documentation Be sure to follow instructions for oVirt 4.5! - If you want to try oVirt as quickly as possible, follow the instructions on the Download <https://ovirt.org/download/> page. - For complete installation, administration, and usage instructions, see the oVirt Documentation <https://ovirt.org/documentation/>. - For upgrading from a previous version, see the oVirt Upgrade Guide <https://ovirt.org/documentation/upgrade_guide/>. - For a general overview of oVirt, see About oVirt <https://ovirt.org/community/about.html>. What’s new in oVirt 4.5.0 Release? This release is available now on x86_64 architecture for: - CentOS Stream 8 - RHEL 8.6 (currently in beta) and derivatives This release supports Hypervisor Hosts on x86_64: - oVirt Node NG (based on CentOS Stream 8) - CentOS Stream 8 - RHEL 8.6 (currently in beta) and derivatives Builds are also available for ppc64le and aarch64. Experimental builds for CentOS Stream 9 are also provided for Hypervisor Hosts. CentOS Stream 9 based oVirt Node NG has not been released due to Bug 2063112 <https://bugzilla.redhat.com/show_bug.cgi?id=2063112>. Security fixes included in oVirt 4.5 compared to latest oVirt 4.4.10: - CVE-2021-33502 <https://access.redhat.com/security/cve/CVE-2021-33502> [moderate] ovirt-web-ui: normalize-url: ReDoS for data URLs - CVE-2022-0207 <https://access.redhat.com/security/cve/CVE-2022-0207> [low] vdsm: disclosure of sensitive values in log files - CVE-2022-24302 <https://access.redhat.com/security/cve/CVE-2022-24302> [moderate] python-paramiko: Race condition in the write_private_key_file function - CVE-2021-41182 <https://access.redhat.com/security/cve/CVE-2021-41182> [moderate] jquery-ui: XSS in the altField option of the datepicker widget [ovirt-engine] - CVE-2021-41183 <https://access.redhat.com/security/cve/CVE-2021-41183> [moderate] jquery-ui: XSS in *Text options of the datepicker widget [ovirt-engine] - CVE-2021-41184 <https://access.redhat.com/security/cve/CVE-2021-41184> [moderate] jquery-ui: XSS in the 'of' option of the .position() util [ovirt-engine] - CVE-2021-33502 <https://access.redhat.com/security/cve/CVE-2021-33502> [moderate] ovirt-engine-ui-extensions: normalize-url: ReDoS for data URLs - CVE-2021-23425 <https://access.redhat.com/security/cve/CVE-2021-23425> [moderate] ovirt-engine-ui-extensions: nodejs-trim-off-newlines: ReDoS via string processing - CVE-2021-3807 <https://access.redhat.com/security/cve/CVE-2021-3807> [moderate] ovirt-engine-ui-extensions: nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes oVirt Node NG (CentOS Stream 8 based) includes updated packages with fixes for: - CVE-2022-25235 <https://access.redhat.com/security/cve/CVE-2022-25235> [important] expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 <https://access.redhat.com/security/cve/CVE-2022-25315> [important] expat: Integer overflow in storeRawNames() - CVE-2022-25236 <https://access.redhat.com/security/cve/CVE-2022-25236> [important] expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2021-4083 <https://access.redhat.com/security/cve/CVE-2021-4083> [important] kernel: fget: check that the fd still exists after getting a ref to it - CVE-2022-0847 <https://access.redhat.com/security/cve/CVE-2022-0847> [important] kernel: improper initialization of the "flags" member of the new pipe_buffer - CVE-2022-0778 <https://access.redhat.com/security/cve/CVE-2022-0778> [important] openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates Some of the RFEs with high user impact are listed below: - 1926625 [RFE] How to enable HTTP Strict Transport Security (HSTS) on Apache HTTPD for Red Hat Virtualization Manager - 1922977 [RFE] VM shared disks are not part of the OVF_STORE - 977778 [RFE] - Mechanism for converting disks for non-running VMS - 2029830 [RFE] Hosted engine should accept OpenSCAP profile name instead of bool - 1933555 [RFE] Release python-ovirt-engine-sdk4 package on RHEL 9 - 1782056 [RFE] Integration of built-in ipsec feature in RHV/RHHI-V with OVN - 1849169 [RFE] add virtualCPUs/physicalCPUs ratio property to evenly_distributed policy - 1624015 [RFE] Expose Console Options and Console invocation via API - 2056126 [RFE] Extend time to warn of upcoming certificate expiration - 1987121 [RFE] Support enabling nVidia Unified Memory on mdev vGPU - 1927985 [RFE] Speed up export-to-OVA on NFS by aligning loopback device offset - 1998255 [RFE] [UI] Add search box for vNIC Profiles in RHVM WebUI on the main vNIC profiles tab - 2021217 [RFE] Windows 2022 support - 2058177 [RFE] Include the package nvme-cli on virtualization hosts - 1975720 [RFE] Huge VMs require an additional migration parameter - 1979277 [RFE] Migration - Apply automatic CPU and NUMA pinning based on the migrated host - 1563552 [RFE] Add Virtio-1.1 support in oVirt (depends in CentOS/RHEL 8.5) - 1986775 [RFE] introduce support for CentOS Stream 9 on oVirt releases - 1990462 [RFE] Add user name and password to ELK integration - 1838089 [RFE] Please allow placing domain in maintenance mode with suspended VM Some of the Bugs with high user impact are listed below: - 1986732 ovirt-ha services cannot set the LocalMaintenance mode in the storage metadata and are in a restart loop - 2043146 Expired /etc/pki/vdsm/libvirt-vnc/server-cert.pem certificate is skipped during Enroll Certificate - 2035051 removing nfs-utils cause ovirt-engine removal due to cinderlib dep tree - 2054745 Setting SD to maintenance fails and turns the SD to inactive mode as a result - 1878724 vdsm-tool configure is failing with error "dependency job for libvirtd.service failed" - 2057958 oVirt Node 4.5 el9 iso doesn't boot anymore - 2024698 build failure in copr - 2075435 Hybrid Backup - backup href has changed and causing backups to get stuck in finalizing stage - 2040402 unable to use --log-size=0 option - 1932149 Create hosted_storage with the correct storage_format based on the Data-Center level of the backup - 1986485 otopi uses deprecated API platform.linux_distribution which has been removed in Python 3.7 and later. - 2024161 Penalizing score by 1000 due to cpu load is not canceled after load decreasing to 0 - 1986728 ovirt-log-collector uses deprecated API platform.linux_distribution which has been removed in Python 3.7 and later. - 2066628 [UI] UI exception when updating or enabling number of VFs via the webadmin - 1986731 ovirt-engine uses deprecated API platform.linux_distribution which has been removed in Python 3.7 and later. - 2066285 Copying from an Image domain to a Managed Block Storage domain fails - 1857815 Copying HE-VM's disk to iSCSI storage volume, during deployment of 4.4 HE takes too long. - 2019869 Local disk is not bootable when the VM is imported from OVA - 2065152 Implicit CPU pinning for NUMA VMs destroyed because of invalid CPU policy - 2069658 Unable to deploy HE, couldn't resolve module/action 'firewalld'. oVirt Node has been updated, including: - oVirt 4.5.0: https://www.ovirt.org/release/4.5.0/ - GlusterFS 10.1: https://docs.gluster.org/en/main/release-notes/10.1/ - RDO OpenStack Yoga: https://releases.openstack.org/yoga/index.html - OVS 2.15 - Ansible Core 2.12.2: https://github.com/ansible/ansible/blob/stable-2.12/changelogs/CHANGELOG-v2.... - CentOS Stream 8 latest updates - Full list of changes compared to oVirt Node 4.5.0 Beta: 4.5.0_beta2 4.5.0_ga NetworkManager 1.37.3-1.el8 1.39.0-1.el8 NetworkManager-config-server 1.37.3-1.el8 1.39.0-1.el8 NetworkManager-libnm 1.37.3-1.el8 1.39.0-1.el8 NetworkManager-ovs 1.37.3-1.el8 1.39.0-1.el8 NetworkManager-team 1.37.3-1.el8 1.39.0-1.el8 NetworkManager-tui 1.37.3-1.el8 1.39.0-1.el8 ansible-core 2.12.3-1.el8 2.12.2-2.el8 bash 4.4.20-3.el8 4.4.20-4.el8 centos-release-advanced-virtualization 1.0-4.el8 centos-release-messaging 1-3.el8 centos-release-openstack-xena 1-1.el8 centos-release-ovirt45 8.6-3.el8s 8.6-4.el8s centos-release-rabbitmq-38 1-3.el8 fwupd 1.7.1-1.el8 1.7.4-2.el8 glibc 2.28-196.el8 2.28-197.el8 glibc-common 2.28-196.el8 2.28-197.el8 glibc-langpack-en 2.28-196.el8 2.28-197.el8 ipa-client 4.9.8-6.module_el8.6.0+1104+ba556574 4.9.8-2.module_el8.6.0+1054+cdb51b28 ipa-client-common 4.9.8-6.module_el8.6.0+1104+ba556574 4.9.8-2.module_el8.6.0+1054+cdb51b28 ipa-common 4.9.8-6.module_el8.6.0+1104+ba556574 4.9.8-2.module_el8.6.0+1054+cdb51b28 ipa-selinux 4.9.8-6.module_el8.6.0+1104+ba556574 4.9.8-2.module_el8.6.0+1054+cdb51b28 kmod-kvdo 6.2.6.14-83.el8 6.2.6.14-84.el8 nmstate 1.3.0-0.alpha.20220310.el8 1.2.1-1.el8 nmstate-plugin-ovsdb 1.3.0-0.alpha.20220310.el8 1.2.1-1.el8 ovirt-ansible-collection 2.0.2-1.el8 2.0.3-1.el8 ovirt-host 4.5.0-2.el8 4.5.0-3.el8 ovirt-host-dependencies 4.5.0-2.el8 4.5.0-3.el8 ovn-2021 21.06.0-29.el8s 21.12.0-11.el8s ovn-2021-host 21.06.0-29.el8s 21.12.0-11.el8s python-oslo-concurrency-lang 4.4.1-1.el8 4.5.0-1.el8 python-oslo-log-lang 4.6.0-1.el8 4.7.0-1.el8 python-oslo-privsep-lang 2.6.2-1.el8 2.7.0-1.el8 python-oslo-utils-lang 4.10.1-2.el8 4.12.2-1.el8 python3-debtcollector 2.3.0-2.el8 2.5.0-1.el8 python3-docutils 0.14-12.2.el8 0.14-12.module_el8.5.0+761+faacb0fb python3-extras 1.0.0-10.el8 python3-fixtures 3.0.0-27.el8 python3-ipaclient 4.9.8-6.module_el8.6.0+1104+ba556574 4.9.8-2.module_el8.6.0+1054+cdb51b28 python3-ipalib 4.9.8-6.module_el8.6.0+1104+ba556574 4.9.8-2.module_el8.6.0+1054+cdb51b28 python3-libnmstate 1.3.0-0.alpha.20220310.el8 1.2.1-1.el8 python3-os-brick 5.0.1-1.el8 5.2.0-1.el8 python3-os-win 5.5.0-1.el8 5.6.0-1.el8 python3-oslo-concurrency 4.4.1-1.el8 4.5.0-1.el8 python3-oslo-config 8.7.1-1.el8 8.8.0-1.el8 python3-oslo-context 3.3.2-1.el8 4.1.0-1.el8 python3-oslo-log 4.6.0-1.el8 4.7.0-1.el8 python3-oslo-privsep 2.6.2-1.el8 2.7.0-1.el8 python3-oslo-serialization 4.2.0-1.el8 4.3.0-1.el8 python3-oslo-service 2.6.1-1.el8 2.8.0-1.el8 python3-oslo-utils 4.10.1-2.el8 4.12.2-1.el8 python3-rpm 4.14.3-22.el8 4.14.3-23.el8 python3-sanlock 3.8.4-3.el8 3.8.4-1.el8 python3-stevedore 3.4.0-1.el8 3.5.0-1.el8 python3-testtools 2.5.0-2.el8 rpm 4.14.3-22.el8 4.14.3-23.el8 rpm-build-libs 4.14.3-22.el8 4.14.3-23.el8 rpm-libs 4.14.3-22.el8 4.14.3-23.el8 rpm-plugin-selinux 4.14.3-22.el8 4.14.3-23.el8 rsyslog 8.2102.0-8.el8 8.2102.0-7.el8 rsyslog-elasticsearch 8.2102.0-8.el8 8.2102.0-7.el8 rsyslog-mmjsonparse 8.2102.0-8.el8 8.2102.0-7.el8 rsyslog-mmnormalize 8.2102.0-8.el8 8.2102.0-7.el8 rsyslog-openssl 8.2102.0-8.el8 8.2102.0-7.el8 sanlock 3.8.4-3.el8 3.8.4-1.el8 sanlock-lib 3.8.4-3.el8 3.8.4-1.el8 selinux-policy 3.14.3-95.el8 3.14.3-96.el8 selinux-policy-targeted 3.14.3-95.el8 3.14.3-96.el8 tzdata 2022a-1.el8 2022a-2.el8 vdsm 4.50.0.11-1.el8 4.50.0.13-1.el8 vdsm-api 4.50.0.11-1.el8 4.50.0.13-1.el8 vdsm-client 4.50.0.11-1.el8 4.50.0.13-1.el8 vdsm-common 4.50.0.11-1.el8 4.50.0.13-1.el8 vdsm-gluster 4.50.0.11-1.el8 4.50.0.13-1.el8 vdsm-http 4.50.0.11-1.el8 4.50.0.13-1.el8 vdsm-jsonrpc 4.50.0.11-1.el8 4.50.0.13-1.el8 vdsm-network 4.50.0.11-1.el8 4.50.0.13-1.el8 vdsm-python 4.50.0.11-1.el8 4.50.0.13-1.el8 vdsm-yajsonrpc 4.50.0.11-1.el8 4.50.0.13-1.el8 virt-install 3.2.0-4.el8 3.2.0-3.el8 virt-manager-common 3.2.0-4.el8 3.2.0-3.el8 oVirt Appliance has been updated, including: - oVirt 4.5.0 beta: https://www.ovirt.org/release/4.5.0/ - GlusterFS 10.1: https://docs.gluster.org/en/main/release-notes/10.1/ - RDO OpenStack Yoga: https://releases.openstack.org/yoga/index.html - OVS 2.15 - Ansible Core 2.12.3: https://github.com/ansible/ansible/blob/stable-2.12/changelogs/CHANGELOG-v2.... - CentOS Stream 8 latest updates - Full list of changes compared to oVirt Appliance 4.5.0 Beta: 4.5.0_beta2 4.5.0_GA NetworkManager 1.37.3-1.el8 1.39.0-1.el8 NetworkManager-libnm 1.37.3-1.el8 1.39.0-1.el8 NetworkManager-team 1.37.3-1.el8 1.39.0-1.el8 NetworkManager-tui 1.37.3-1.el8 1.39.0-1.el8 bash 4.4.20-3.el8 4.4.20-4.el8 centos-release-advanced-virtualization 1.0-4.el8 centos-release-messaging 1-3.el8 centos-release-openstack-xena 1-1.el8 centos-release-ovirt45 8.6-3.el8s 8.6-4.el8s centos-release-rabbitmq-38 1-3.el8 glibc 2.28-196.el8 2.28-197.el8 glibc-common 2.28-196.el8 2.28-197.el8 glibc-gconv-extra 2.28-196.el8 2.28-197.el8 glibc-langpack-en 2.28-196.el8 2.28-197.el8 libestr 0.1.10-1.el8 0.1.10-3.el8 ovirt-ansible-collection 2.0.2-1.el8 2.0.3-1.el8 ovirt-engine 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-backend 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-dbscripts 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-extension-aaa-misc 1.1.0-1.el8 1.1.1-1.el8 ovirt-engine-keycloak 15.0.2-1.el8 ovirt-engine-keycloak-setup 15.0.2-2.el8 ovirt-engine-restapi 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-setup 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-setup-base 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-setup-plugin-cinderlib 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-setup-plugin-imageio 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-setup-plugin-ovirt-engine 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-setup-plugin-ovirt-engine-common 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-setup-plugin-vmconsole-proxy-helper 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-setup-plugin-websocket-proxy 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-tools 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-tools-backup 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-vmconsole-proxy-helper 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-webadmin-portal 4.5.0.1-1.el8 4.5.0.4-1.el8 ovirt-engine-websocket-proxy 4.5.0.1-1.el8 4.5.0.4-1.el8 ovn-2021 21.06.0-29.el8s 21.12.0-11.el8s ovn-2021-central 21.06.0-29.el8s 21.12.0-11.el8s protobuf 3.11.2-2.el8 3.19.0-2.el8s python-oslo-concurrency-lang 4.4.1-1.el8 4.5.0-1.el8 python-oslo-db-lang 11.0.0-1.el8 11.2.0-1.el8 python-oslo-log-lang 4.6.0-1.el8 4.7.0-1.el8 python-oslo-middleware-lang 4.4.0-1.el8 4.5.1-1.el8 python-oslo-privsep-lang 2.6.2-1.el8 2.7.0-1.el8 python-oslo-utils-lang 4.10.1-2.el8 4.12.2-1.el8 python-oslo-versionedobjects-lang 2.5.0-1.el8 2.6.0-1.el8 python3-automaton 2.4.0-1.el8 2.5.0-1.el8 python3-cinder-common 19.0.0-2.el8 20.0.0-1.el8 python3-debtcollector 2.3.0-2.el8 2.5.0-1.el8 python3-docutils 0.14-12.2.el8 0.14-12.module_el8.5.0+761+faacb0fb python3-extras 1.0.0-10.el8 python3-fixtures 3.0.0-27.el8 python3-os-brick 5.0.1-1.el8 5.2.0-1.el8 python3-os-win 5.5.0-1.el8 5.6.0-1.el8 python3-oslo-concurrency 4.4.1-1.el8 4.5.0-1.el8 python3-oslo-config 8.7.1-1.el8 8.8.0-1.el8 python3-oslo-context 3.3.2-1.el8 4.1.0-1.el8 python3-oslo-db 11.0.0-1.el8 11.2.0-1.el8 python3-oslo-log 4.6.0-1.el8 4.7.0-1.el8 python3-oslo-messaging 12.9.2-1.el8 12.13.0-1.el8 python3-oslo-metrics 0.3.1-1.el8 0.4.0-1.el8 python3-oslo-middleware 4.4.0-1.el8 4.5.1-1.el8 python3-oslo-privsep 2.6.2-1.el8 2.7.0-1.el8 python3-oslo-serialization 4.2.0-1.el8 4.3.0-1.el8 python3-oslo-service 2.6.1-1.el8 2.8.0-1.el8 python3-oslo-utils 4.10.1-2.el8 4.12.2-1.el8 python3-oslo-versionedobjects 2.5.0-1.el8 2.6.0-1.el8 python3-ovirt-engine-lib 4.5.0.1-1.el8 4.5.0.4-1.el8 python3-ovsdbapp 1.12.0-1.el8 1.15.1-1.el8 python3-rpm 4.14.3-22.el8 4.14.3-23.el8 python3-stevedore 3.4.0-1.el8 3.5.0-1.el8 python3-taskflow 4.6.2-1.el8 4.6.4-1.el8 python3-testtools 2.5.0-2.el8 python3-tooz 2.9.0-1.el8 2.10.1-1.el8 python38-docutils 0.14-12.2.el8 0.14-12.4.el8 rpm 4.14.3-22.el8 4.14.3-23.el8 rpm-build 4.14.3-22.el8 4.14.3-23.el8 rpm-build-libs 4.14.3-22.el8 4.14.3-23.el8 rpm-libs 4.14.3-22.el8 4.14.3-23.el8 rpm-plugin-fapolicyd 4.14.3-22.el8 4.14.3-23.el8 rpm-plugin-selinux 4.14.3-22.el8 4.14.3-23.el8 selinux-policy 3.14.3-95.el8 3.14.3-96.el8 selinux-policy-targeted 3.14.3-95.el8 3.14.3-96.el8 tzdata 2022a-1.el8 2022a-2.el8 tzdata-java 2022a-1.el8 2022a-2.el8 usbguard 1.0.0-9.el8 1.0.0-10.el8 usbguard-selinux 1.0.0-9.el8 1.0.0-10.el8 See the release notes for installation instructions and a list of new features and bugs fixed. Additional resources: - Read more about the oVirt 4.5.0 release highlights: https://www.ovirt.org/release/4.5.0/ - Get more oVirt project updates on Twitter: https://twitter.com/ovirt - Check out the latest project news on the oVirt blog: https://blogs.ovirt.org/ -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo@redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*
participants (1)
-
Sandro Bonazzola