RHBA-2021:5091 - Bug Fix Advisory

Topic

Red Hat OpenShift Virtualization release 4.9.1 is now available with updates to packages and images that fix several bugs and add enhancements.

Description

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.

This advisory contains the following OpenShift Virtualization 4.9.1 images:

RHEL-8-CNV-4.9
==============
bridge-marker-container-v4.9.1-2
virtio-win-container-v4.9.1-2
kubevirt-v2v-conversion-container-v4.9.1-2
cnv-containernetworking-plugins-container-v4.9.1-2
kubemacpool-container-v4.9.1-3
ovs-cni-marker-container-v4.9.1-4
ovs-cni-plugin-container-v4.9.1-4
node-maintenance-operator-container-v4.9.1-3
kubevirt-vmware-container-v4.9.1-2
vm-import-controller-container-v4.9.1-3
vm-import-virtv2v-container-v4.9.1-3
hostpath-provisioner-operator-container-v4.9.1-3
vm-import-operator-container-v4.9.1-3
hostpath-provisioner-container-v4.9.1-3
virt-controller-container-v4.9.1-11
virt-launcher-container-v4.9.1-11
virt-handler-container-v4.9.1-11
virt-api-container-v4.9.1-11
virt-artifacts-server-container-v4.9.1-11
virt-operator-container-v4.9.1-11
libguestfs-tools-container-v4.9.1-11
kubevirt-ssp-operator-container-v4.9.1-5
cluster-network-addons-operator-container-v4.9.1-9
kubernetes-nmstate-handler-container-v4.9.1-9
virt-cdi-operator-container-v4.9.1-8
virt-cdi-cloner-container-v4.9.1-8
virt-cdi-uploadproxy-container-v4.9.1-8
cnv-must-gather-container-v4.9.1-8
virt-cdi-apiserver-container-v4.9.1-8
virt-cdi-uploadserver-container-v4.9.1-8
virt-cdi-importer-container-v4.9.1-8
kubevirt-template-validator-container-v4.9.1-4
virt-cdi-controller-container-v4.9.1-8
hyperconverged-cluster-webhook-container-v4.9.1-6
hyperconverged-cluster-operator-container-v4.9.1-6
hco-bundle-registry-container-v4.9.1-52

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Container Native Virtualization 4.9 for RHEL 8 x86_64
• Red Hat Container Native Virtualization 4.9 for RHEL 7 x86_64

Fixes

• BZ - 1929165 - [RFE] A cluster may have old and new templates (e.g after upgrade); older templates should be protected from deletion
• BZ - 1938262 - [KubeVirt] Pod placement configuration - dry run is not performed for all the configuration stanza
• BZ - 1987329 - Guest reports incorrect CPU topology when pinned and specifying CPU_THREADS
• BZ - 2000298 - [RFE] Add support for VMware Change ID in spec.source.checkpoints
• BZ - 2002219 - Failed to hotplug volume to VM with IOThreads
• BZ - 2002313 - Kubevirt doesn't respect cpuAllocationRatio
• BZ - 2003112 - Frequent ' VirtualMachineInstance defined' events for the VM when there is no activity
• BZ - 2006810 - CNAO is bombarding kube API and HCO with status updates
• BZ - 2008166 - Recording Rules which uses "up" metrics showing incorrect output.
• BZ - 2011207 - Migration with container disk ":latest" images is failing when image changed
• BZ - 2011369 - [4.9.z] caBundle not updated on kube-admission-webhook pods: etcdserver: request is too large
• BZ - 2013252 - kcs: How to set ioTimeout values in Windows
• BZ - 2013662 - Unexpected killing of virt-launcher pod, can result in loss of data for hotplugged volumes
• BZ - 2017262 - Datavolume backed by storage not supporting O_DIRECT is not usable
• BZ - 2017613 - Import preallocation blank block disk is failed with big enough sizes
• BZ - 2019814 - 4.9.1 containers
• BZ - 2021476 - kubernetes-nmstate source is outdated
• BZ - 2024674 - Upgrade from 2.6 to 4.x versions failed due to vlan-filtering issues
• BZ - 2026431 - Alerts: SSPDown and SSPTemplateValidatorDown are constantly in Firing state
• BZ - 2026876 - [4.x] vlan-filtering is getting applied on veth ports
• BZ - 2027752 - No ability to upgrade from 4.9.0->4.9.1

CVEs

• CVE-2020-36385
• CVE-2021-0512
• CVE-2021-3656
• CVE-2021-3733
• CVE-2021-20317
• CVE-2021-22946
• CVE-2021-22947
• CVE-2021-28950
• CVE-2021-33928
• CVE-2021-33929
• CVE-2021-33930
• CVE-2021-33938
• CVE-2021-42574
• CVE-2021-43267

References

(none)