RHBA-2022:0641 - Bug Fix Advisory

Topic

Red Hat OpenShift Virtualization release 4.9.3 is now available with updates to packages and images that fix several bugs and add enhancements.

Description

This advisory contains the following OpenShift Virtualization 4.9.3 images:

RHEL-8-CNV-4.9

==============

kubevirt-vmware-container-v4.9.3-2
vm-import-virtv2v-container-v4.9.3-3
hostpath-provisioner-operator-container-v4.9.3-3
bridge-marker-container-v4.9.3-2
ovs-cni-plugin-container-v4.9.3-2
hostpath-provisioner-container-v4.9.3-3
hyperconverged-cluster-operator-container-v4.9.3-4
hyperconverged-cluster-webhook-container-v4.9.3-4
kubevirt-ssp-operator-container-v4.9.3-2
kubevirt-template-validator-container-v4.9.3-2
ovs-cni-marker-container-v4.9.3-2
virtio-win-container-v4.9.3-2
kubevirt-v2v-conversion-container-v4.9.3-3
node-maintenance-operator-container-v4.9.3-2
cnv-containernetworking-plugins-container-v4.9.3-2
vm-import-operator-container-v4.9.3-3
vm-import-controller-container-v4.9.3-3
cnv-must-gather-container-v4.9.3-8
cluster-network-addons-operator-container-v4.9.3-3
virt-api-container-v4.9.3-4
virt-artifacts-server-container-v4.9.3-4
virt-handler-container-v4.9.3-4
virt-launcher-container-v4.9.3-4
virt-operator-container-v4.9.3-4
libguestfs-tools-container-v4.9.3-4
virt-controller-container-v4.9.3-4
virt-cdi-apiserver-container-v4.9.3-6
virt-cdi-uploadserver-container-v4.9.3-6
virt-cdi-uploadproxy-container-v4.9.3-6
virt-cdi-operator-container-v4.9.3-6
virt-cdi-cloner-container-v4.9.3-6
virt-cdi-controller-container-v4.9.3-6
virt-cdi-importer-container-v4.9.3-6
kubernetes-nmstate-handler-container-v4.9.3-4
kubemacpool-container-v4.9.3-3
hco-bundle-registry-container-v4.9.3-23

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Container Native Virtualization 4.9 for RHEL 8 x86_64
• Red Hat Container Native Virtualization 4.9 for RHEL 7 x86_64

Fixes

• BZ - 1966137 - Custom VMs are not highlighted in must-gather
• BZ - 2000661 - Wrong error message when importing from private registry with TLS certificate which is NOT signed by a trusted CA
• BZ - 2012167 - Virt-handler pods uses iptables instead of nftables, causing service-mesh related rules to be missing
• BZ - 2017478 - Some of the cdi and hpp resources are missing labels after upgrade to CNV 4.9
• BZ - 2017802 - Better event handling and logging needed for migrations
• BZ - 2024526 - After MaxUnavailableLimitReached is reached nodes get stuck in pending state
• BZ - 2042847 - [4.9] nncp changing it's status between "ConfigurationProgressing" to "SuccessfullyConfigured" every few minutes
• BZ - 2044051 - 4.9.3 containers
• BZ - 2045143 - Getting 'jq' error while running 'must-gather' command.
• BZ - 2045156 - 'yq' command is missing in downstream must-gather image.

CVEs

• CVE-2021-3521
• CVE-2021-4034
• CVE-2021-4154
• CVE-2021-4155
• CVE-2022-0185

References

(none)