RHBA-2019:1567 - Bug Fix Advisory

Topic

Updated VDSM packages that fix several bugs and add various enhancements are now available.

Description

VDSM is a management module that serves as a Red Hat Virtualization Manager agent on Red Hat Virtualization Hosts or Red Hat Enterprise Linux hosts.

Changes to the vdsm component:

• TBA (BZ#1707932)
• When a virtual machine migration entered post-copy mode and remained in that mode for a long time, the migration sometimes failed and the migrated virtual machine was powered off. In this release, post-copy migrations are maintained to completion. (BZ#1711792)
• When a host is running in FIPS mode, VNC must use SASL authorization instead of regular passwords because of the weak algorithm inherent in the VNC protocol.

In order to facilitate that process, the Ansible role 'ovirt-host-setup-vnc-sasl' is provided. It must be run manually on all FIPS hosts. The role does the following:

• Creates an (empty) SASL password database
• Prepares an SASL configuration file for qemu
• Changes the libvirt configuration file for qemu (BZ#1695567)
• Converting a storage domain to the V5 format failed when there were partly deleted volumes with cleared metadata remaining in the storage domain following an unsuccessful delete volume operation. In this release, storage domain conversion succeeds even when partly deleted volumes with cleared metadata remain in the storage domain. (BZ#1714154)

A list of additional bugs fixed in this update is available in the Technical Notes
book:

https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html-single/technical_notes

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/2974891

Affected Products

• Red Hat Virtualization 4 for RHEL 7 x86_64
• Red Hat Virtualization for IBM Power LE 4 for RHEL 7 ppc64le

Fixes

• BZ - 1695567 - [downstream clone - 4.3.4] [RFE] Support VMs with VNC console on a FIPS enabled hypervisor
• BZ - 1707932 - [downstream clone - 4.3.4] Moving disk results in wrong SIZE/CAP key in the volume metadata
• BZ - 1710430 - Rebase bug for vdsm 4.3.4
• BZ - 1711792 - [downstream clone - 4.3.4] Migration aborted, probably due to stalling
• BZ - 1714154 - [downstream clone - 4.3.4] When a storage domain is updated to V5 during a DC upgrade, if there are volumes with metadata that has been reset then the upgrade fails

CVEs

(none)

References

(none)