- Issued:
- 2017-05-24
- Updated:
- 2017-07-17
RHEA-2017:1280 - Product Enhancement Advisory
Synopsis
Red Hat Virtualization Manager (ovirt-engine) 4.1.2
Type/Severity
Product Enhancement Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
An update is now available for Red Hat Virtualization Manager.
Description
The Red Hat Virtualization Manager is a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities, resource management, live migrations, and virtual infrastructure provisioning.
The Manager is a JBoss Application Server application that provides several interfaces for accessing and interacting with the virtual environment, including an Administration Portal, a User Portal, and a Representational State Transfer (REST) Application Programming Interface (API).
Changes to the ovirt-engine component:
- Previously, the Manager allowed setting memory overcommitment without also enabling KSM or ballooning. The scheduler then used the requested optimization, but there was nothing allowing it at the host level. This has now been fixed so that memory overcommitment can only be set when KSM or ballooning is enabled. (BZ#1402838)
- Previously, the Host Device filter policy unit did not account for hosts that had a device attached to the virtual machine. In certain scheduling conditions the Manager attempted to run a virtual machine (with passthrough host devices) on the wrong host, or to migrate to a different host, which ultimately resulted in an error at the libvirt level. Now, the Host Device filter policy unit correctly takes into account hosts whose devices are to be used and filters all others. (BZ#1429466)
- Previously, CPU profile permissions were checked even if the command to import a self-hosted engine virtual machine was run internally. If the CPU profile in the cluster did not have permissions for 'Everyone', the import would fail.
This updated disables permission checking if the command is called internally. (BZ#1435088)
- Previously, there was high latency when updating the data from a host’s Comment field to the Manager. This has now been fixed by improving the logic used when querying the database and by accessing a lighter VDS view in the database. (BZ#1436972)
- Previously, when attempting to import a template from a non-master data domain that was imported from a version of Red Hat Virtualization earlier than 4.1 a pop-up error message displayed, "Cannot import Template. Memory size (X MB) cannot exceed maximum memory size (0MB)." Now, the maximum amount of memory that can be handled during a template import has been corrected. (BZ#1449641)
- Previously, after running engine-upgrade-check, the user was not informed that the system may not be up-to-date if engine-setup was not run after running yum update, for example. This is despite engine-upgrade-check stating that no upgrade is available. This has now been fixed so that a warning message is displayed to the user if engine-setup was not run. (BZ#1446056)
- Previously, it was possible to configure memory overcommit without setting memory ballooning or KSM control. This configuration affected the scheduling, but the memory was not freed. This has now been fixed by disabling ballooning and KSM by default, and setting memory optimization to “None” (100%). (BZ#1433961)
- Previously, if snapshots of a virtual machine with disks attached were deleted, and a disaster occurred before the OVF_STORE was updated with this change, reattaching the storage domain during disaster recovery would fail because the OVF of the virtual machine incorrectly indicated that there were disks with snapshots. Now, the XML parser of the OVF uses 'set' instead of 'list', so that even if there are snapshots in the virtual machine's OVF, they are counted only once, so attaching the storage domain succeeds. (BZ#1446920)
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat Virtualization 4.1 x86_64
Fixes
- BZ - 1380128 - [RFE] Use authz name instead of profile name as domain for Cloud-Init/Sysprep for windows guests.
- BZ - 1402838 - Block memory over-commitment when KSM and ballooning are not being used
- BZ - 1429466 - [downstream clone - 4.1.2] Block/limit/warn VM migration in UI if it has hostdev devices attached
- BZ - 1433961 - Disable overcommit by default when creating new cluster
- BZ - 1435088 - [Upgrade] Auto-Import of HostedEngine VM fails due to missing CPU Profile Permissions
- BZ - 1436219 - [RFE] Users should be able to seal VMs from RHEV-M
- BZ - 1436972 - [zstream clone - 4.1.2] Long time for operations when updating hosts data in RHEVM
- BZ - 1439611 - [z-stream clone - 4.1.2] Running the command logon on the VM via the REST failed with the exception
- BZ - 1441935 - [RFE] Users should be able to seal VMs from RHEV-M
- BZ - 1445733 - [downstream clone - 4.1.2] ovirt-engine does not shut down cleanly
- BZ - 1445736 - [downstream clone - 4.1.2] Don't display authorization provider name as a part of user name in users lists if it's displayed in specific authorization provider name column
- BZ - 1445943 - [downstream clone - 4.1.2] Placeholders for product name is not rendered in API documentation
- BZ - 1445944 - [downstream clone - 4.1.2] User can no longer use API having password with special character "+".
- BZ - 1445945 - [downstream clone - 4.1.2] If group has assigned permission in engine and its name is updated on LDAP server, the group name is not updated within webadmin
- BZ - 1446056 - [downstream clone - 4.1.2] [TEXT] - engine-upgrade-check should prompt user that while RPMs are updated the engine might not be updated if he didn't run engine setup
- BZ - 1446919 - [downstream clone - 4.1.2] Snapshot deletion fails with error reported as "Drive image file could not be found"
- BZ - 1446920 - [downstream clone - 4.1.2] ERROR: duplicate key value violates unique constraint "pk_unregistered_disks_to_vms"
- BZ - 1447236 - [downstream clone - 4.1.2] Unable to allocate 32GB of RAM to Windows 10x64
- BZ - 1448199 - Cold Merge entries in engine log are not associated with each other
- BZ - 1448698 - [downstream clone - 4.1.2] [TEXT] - Clarify 'Experimental' Switch Type on Cluster Settings
- BZ - 1449641 - [downstream clone - 4.1.2] Unable to import a template to RHV 4.1 from Storage domain imported of RHEV 3.5
- BZ - 1449750 - [downstream clone - 4.1.2] Snapshot remains in locked status after async delete using api (only when using async)
CVEs
(none)
References
(none)
Red Hat Virtualization 4.1
SRPM | |
---|---|
ovirt-engine-4.1.2.2-0.1.el7.src.rpm | SHA-256: d394332013e6454a33d5b166d74388c6559a97a96b0b12bf217ccee437f3d0f2 |
x86_64 | |
ovirt-engine-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: 853404369a703795fd2acedb65135daddb27a28209ce6a861dbc8a22df0308f4 |
ovirt-engine-backend-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: d1320b6ba653b319fad21947f61dd6a248d00a855c70f1b914cb58adfe16d124 |
ovirt-engine-dbscripts-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: 8e162bc79d50b0bffcfaa769481a0b20703873c5d1c1e612b418c61569425f79 |
ovirt-engine-extensions-api-impl-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: fd9849d76cd786b2976ef71478c19c0434a0d76bedff295a5f5675c4463546b5 |
ovirt-engine-extensions-api-impl-javadoc-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: 937afda5ce2a19c4c391f953a3c20016533fc5e4a8f6e3584018d41c58f9bcc9 |
ovirt-engine-lib-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: 648ea05bf7c7d485e816bdc9bf7b8b437cf12ab7b8c45ca32519a87591508352 |
ovirt-engine-restapi-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: f1e59eae4e6c1a92d3f50f4b75c1f42b72ed8a3c63d3e1ade76ed9eb62b80afc |
ovirt-engine-setup-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: 3f5d25140ba2aff65355ca6d6fdbb1d54f0cb4e6bc6d57b00c33a58bc2177b25 |
ovirt-engine-setup-base-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: fdd6e38489da5bb1a26d56825ce1ef209c1a00fa209c0be77c0379cde616598f |
ovirt-engine-setup-plugin-ovirt-engine-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: fb15b6936b4f5fc659ec83889f1a735b24f7a7eedc8a0467ff872bb2263ae01b |
ovirt-engine-setup-plugin-ovirt-engine-common-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: b5bd3f78b6b1df32862d8141035c08b86b6408557e2dfa1de4f3a728de801027 |
ovirt-engine-setup-plugin-vmconsole-proxy-helper-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: 433aaf650c3c35c98d4f1d667305ae5162bbf32b5acbc867403eddf471df6bde |
ovirt-engine-setup-plugin-websocket-proxy-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: 25da1a18bcc85576957d73dddc471ca566a744904771b4f67734396f3da6e65c |
ovirt-engine-tools-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: 78f8ccae67bc21fe14525162b8402f3c08669893a5344e29e63bee57d5ded355 |
ovirt-engine-tools-backup-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: ec3da6cab2dd677796ecc576b4bfe097ec278e4a01199cd97f3a5b9d017b5bca |
ovirt-engine-userportal-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: edc6f9e40d71ab62150b83b038d7b8edc12e611526299206a9b94f345ef3f033 |
ovirt-engine-userportal-debuginfo-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: b779541efb3bbce941704e553acadad11831e6a21f9fdcc1df01414511bf13d2 |
ovirt-engine-vmconsole-proxy-helper-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: b5700308b4ed9a91d0c92d8ca0214de458bb388bf9ddc598e94936fc24cd5664 |
ovirt-engine-webadmin-portal-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: e724343b808793482493468d9ab5a0e6dfc883cf903989b5fb704d81d2174d2a |
ovirt-engine-webadmin-portal-debuginfo-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: 97ec00f239ebe7d58d5347b2e420cb27fbb20073289bdda7a8bb8f73968fa4f9 |
ovirt-engine-websocket-proxy-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: f0b5ae26baf44ec2860a8312bafa987cf3629ed419515e6e758c1cf651c96ea2 |
rhevm-4.1.2.2-0.1.el7.noarch.rpm | SHA-256: faa76a0f80bd9f6d5c8e3e86eef77340d9b756952d00d4fd1465f1572363737c |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.