- Issued:
- 2019-05-08
- Updated:
- 2019-05-08
RHEA-2019:1085 - Product Enhancement Advisory
Synopsis
ovirt-engine bug fix and enhancement update
Type/Severity
Product Enhancement Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated ovirt-engine packages that fix several bugs and add various enhancements are now available.
Description
The ovirt-engine package provides the manager for virtualization environments. This manager enables admins to define hosts and networks, as well as to add storage, create VMs and manage user permissions.
A list of bugs fixed in this update is available in the Technical Notes
book:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html-single/technical_notes
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat Virtualization Manager 4.3 x86_64
Fixes
- BZ - 968435 - [RFE] Present in the UI the correlation between virtual disks in a VM and what the VM sees
- BZ - 1009608 - [RFE] Limit east-west traffic of VMs with network filter
- BZ - 1115607 - Edit Domain dialogue box fails to resize for over 13 lines on the vertical
- BZ - 1129575 - [RFE] [userportal] [webadmin] Limit the number of a user session to portal to a configurable value in admin portal
- BZ - 1131178 - [RFE] Include storage domain UUID in Storage Domain 'General' tab
- BZ - 1155676 - [RFE] Would like a method of sharing templates between RHEV environments (requires template OVA upload/download)
- BZ - 1167675 - [GUI]>[SetupNetworks]> misleading message about unmanaged/unsynced network
- BZ - 1284775 - [PPC64LE] enable memory hotplug support
- BZ - 1308744 - [RFE] PAPR Hash Page Table (HPT) resizing (RHV)
- BZ - 1312909 - Live disk migration fails noting "Failed to VmReplicateDiskFinishVDS"
- BZ - 1388098 - [RFE] Prevent RHV-M from restarting hosts during large outage
- BZ - 1403183 - Cloned VMs created from template with "Raw" format are having "Thin Provision" Allocation Policy
- BZ - 1429286 - RAW-Preallocated disk is converted to RAW-sparse while cloning a VM in file based storage domain
- BZ - 1441741 - [Docs][REST][Python][Ruby][Java] v4 API - Document the proper way to retrieve IP-addresses of a VM
- BZ - 1454673 - [RFE] Changes that require Virtual Machine restart: name
- BZ - 1466047 - [RFE] Need FIPS support for Ovirt-Engine
- BZ - 1497355 - Live Storage Migration continued on after snapshot creation hung and timed out
- BZ - 1511697 - [RFE] Unable to set permission on all but Hosted-Engine VM and Storage Domain
- BZ - 1513398 - rhv manager does not show the results of the search properly
- BZ - 1516473 - Don't display required networks in the iSCSI Bonding dialogs
- BZ - 1520848 - Hit Xorg Segmentation fault while installing rhel7.4 release guest in RHV 4.2 with QXL
- BZ - 1527249 - [DR] - HA VM with lease will not work, if SPM is down and power management is not available.
- BZ - 1527860 - [RFE] Q35: change piix3-usb controller (USB1) to qemu-xhci controller (USB3)
- BZ - 1527882 - [RFE] Q35: Use 16 PCI Express Root Ports as a system-wide configuration in RHV-M
- BZ - 1532969 - [RFE] Q35: Support booting virtual machines via UEFI
- BZ - 1535603 - Importing a template will fail with error "Template's image doesn't exist" if the template disk was copied from another storage domain
- BZ - 1536397 - CloudInit: DNS search parameter is passed incorrectly
- BZ - 1540921 - [RFE] Deprecate and remove support for Conroe and Penryn CPUs
- BZ - 1548205 - Very slow UI if Host has many (~64) elements (VFs or dummies or networks)
- BZ - 1550634 - Drop 3.6 and 4.0 datacenter/cluster level
- BZ - 1553425 - Number of "Prestarted VMs" is ignored and all VMs of Pool starts after editing existing Pool.
- BZ - 1554369 - Live Merge failed on engine with "still in volume chain", but merge on host was successful
- BZ - 1555116 - Merge retry validation fails with NPE after previous commit/destroyImage timeout
- BZ - 1559694 - RFE: warn user if VM does not fit in a single numa node of the host
- BZ - 1560132 - [RFE] Add finer grained monitoring thresholds for memory consumption on Hypervisors to RHV
- BZ - 1561052 - The Active VM snapshots table entry does not exist for a specific VM
- BZ - 1561539 - [RFE] Allow adding a new host or reinstalling existing one and switching it to Maintenance without activation
- BZ - 1563271 - [RFE][engine] Need to add entries to allow customers to set TLS version and TLS-ciphers for Spice VMs.
- BZ - 1565673 - ovirt-engine loses track of a cancelled disk
- BZ - 1568265 - Skipped power management operation has misleading logs
- BZ - 1570040 - [RFE] RH Single Sign-On or OpenID Connect integration with Administration/User Portal
- BZ - 1571024 - [Downstream clone] [RFE] Provide Live Migration for VMs based on "High Performance VM" Profile
- BZ - 1574346 - Move disk failed but delete was called on source sd, losing all the data
- BZ - 1574771 - [RFE] Provide a friendly interface (UI + REST) for virtio multiqueue network interfaces
- BZ - 1576134 - Failed to remove host xxxxxxxx
- BZ - 1576862 - Uploaded image: Virtual Size of qcow2 image is not reflected at guest OS level
- BZ - 1578357 - [SCALE] Listing users in Users tab overloads the postgresql DB (CPU)
- BZ - 1579008 - ovirt-engine fails to start when having a large number of stateless snapshots
- BZ - 1580128 - [RFE] Need a way to track how many logical volumes consumed in a storage domain and alert when it gets full
- BZ - 1580243 - A host with Unreachable Data SD is not moving to non-operational when brought up (but remains in a loop between non-responsive and connecting)
- BZ - 1582824 - [UI] - VM's network interface name and icon too large and wrap
- BZ - 1583009 - [RFE] Balancing does not produce ideal migrations
- BZ - 1585840 - Snapshot tab of a VM doesn't show any snapshots and reports java.lang.NullPointerException: html is null in UI.log
- BZ - 1586126 - After upgrade to RHV hosts can no longer be set into maintenance mode.
- BZ - 1588498 - [RFE] - Drop rhev-guest-tools-iso and virtio-win from rhvm package dependencies
- BZ - 1588738 - JsonMappingException in businessentities.storage.DiskImage prevents access to Engine
- BZ - 1590202 - [RFE] Disable Event notification popup in admin portal
- BZ - 1591751 - Recreate engine_cache dir during start and host deployment flows
- BZ - 1594615 - Unable to perform upgrade from 4.1 to 4.2 due to selinux related errors.
- BZ - 1595067 - [RFE] Improve Backup Storage Domain usability
- BZ - 1595489 - Virtual machine lost its cdrom device
- BZ - 1597062 - setupNetworks holding vds lock for too long
- BZ - 1597085 - [RFE] End-to-end VNC encryption for RHV VMs
- BZ - 1598131 - OVN network synchronization not working after replacing the RHV-M tls certificate with a commercial one
- BZ - 1598391 - [RFE] - Certify OSP 14 with OVN as an external network provider on RHV 4.3
- BZ - 1598594 - Live merge fails on the RHV-M Engine with "Invalid UUID string: payload" followed by exception.
- BZ - 1599321 - Config values inconsistency between RHV versions
- BZ - 1599525 - ovirt-web-ui is not getting updating during engine-setup which is creating unexpected results
- BZ - 1600573 - add AMD EPYC SSBD CPU
- BZ - 1600788 - Engine allows deleting HE volumes.
- BZ - 1602968 - [RFE] Add "power off VM" to the right-click popup menu in the GUI
- BZ - 1603020 - Indicate that RHV-H hosts have to be rebooted always after upgrade
- BZ - 1608056 - engine-setup answers file does not generate proper responses for Apache configuration
- BZ - 1608291 - [RFE] Should be able to change the Port number of NoVnc
- BZ - 1609011 - Creating transient disk during backup operation is failing with error "No such file or directory"
- BZ - 1609839 - Foreign key constraint violation on upgrade to 4.2.5
- BZ - 1611617 - On rollback of failed upgrade from 4.2.1+, engine-setup outputs errors about the uuid-ossp extension
- BZ - 1611889 - Switch from ENI to OMP dumps network config to different file and breaks EL6 guests
- BZ - 1613105 - RHV Administration Portal fails with 404 error after updating to RHV 4.2.5
- BZ - 1614818 - [RFE] Upgrade to Software Collections PostgreSQL 10
- BZ - 1619233 - prepareMerge task is stuck when executing a cold merge on illegal image
- BZ - 1619474 - Pending change IO thread disable is not applied on shutdown
- BZ - 1619866 - IO-Threads is enabled inadvertently by editing unrelated configuration
- BZ - 1622068 - Network type shows both rt8319 and virtio when import guest from ova on rhv4.2
- BZ - 1624069 - [RFE] Custom RHV Bond Naming
- BZ - 1624219 - Pool does not appear for user in group until refresh
- BZ - 1625543 - After importing KVM VM the actual size is bigger than the virtual size
- BZ - 1625612 - [RHV] failed to convert VMware ESX VM with snapshot
- BZ - 1626278 - [downstream clone]'Next Run configuration snapshot' is part of VM snapshots, therefore, some of snapshot operations are allowed for it (like clone VM from snapshot)
- BZ - 1626907 - Live Snapshot creation on a "not responding" VM will fail during "GetQemuImageInfoVDS"
- BZ - 1628909 - Engine marks the snapshot status as OK before the actual snapshot operation
- BZ - 1630243 - [RFE] Show live migration progress bar also in virtual machine tab in host page
- BZ - 1631249 - Make sure RHV Manager will use OpenJDK 8 even when newer versions are available
- BZ - 1631360 - use "Red Hat" manufacturer in SMBIOS for RHV VMs
- BZ - 1631392 - "New Pool" and "Edit Pool" windows have different labels for "Prestarted VMs"
- BZ - 1632055 - PowerSaving keeps VMs on over-utilized hosts while a host is empty and on.
- BZ - 1633310 - Entries for snapshot creations in the command_entities table in the database prevented access to the Admin Portal
- BZ - 1633645 - Old 'Intel Haswell Family-IBRS' cluster CPU type not renamed during the upgrade
- BZ - 1633777 - VM cloned from template remains locked, subsequent clones fail
- BZ - 1635304 - [RFE] Nested hostgroups from Foreman are shown as flat in RHV
- BZ - 1635405 - Move Disk dialog keeps spinning - API method works
- BZ - 1635830 - Upload disk fail trying to write 0 bytes after the end of the LV
- BZ - 1635845 - Report Guest-OS uptime in RHV-M
- BZ - 1635942 - Clone VM with Direct LUN fails on UI but succeeds on backend.
- BZ - 1636256 - [RFE] - limit the number of simultaneous logon sessions per user on RHVM
- BZ - 1636331 - Return error when attempting to update disk from /api/disks/{disk_id}
- BZ - 1636967 - Host-Upgrade dialog should be same
- BZ - 1636981 - [RFE] provide a sorted list of available boot-iso in "run once" dialog for virtual machines
- BZ - 1637015 - [RFE] add option to disable toast notifications per user
- BZ - 1637846 - RemoveVmCommand doesn't log the user
- BZ - 1638124 - VM fails to start if maxMemory >= 2048 GB
- BZ - 1638540 - LSM encountered WELD-000049 exception and never issued live merge
- BZ - 1640977 - RESTAPI listing diskprofiles only shows 1 href for the same QoS even if there are more domains with the same QoS
- BZ - 1641430 - During cold reboot treatment, RunVm did not run for some VMs
- BZ - 1641703 - Importing VM template fails with ERROR: insert or update on table "vm_static" violates foreign key constraint "fk_vm_static_lease_sd_i d_storage_domain_static_id"
- BZ - 1641882 - Power on on already powered on host sets VMs as down and results in split-brain
- BZ - 1642872 - CVE-2019-3879 ovirt-engine: Missing permissions check in web ui allows a user with basic privileges to delete disks [rhev-m-4.3.0]
- BZ - 1643486 - Wrong 'maxBandwidth' sent to vdsm on migration
- BZ - 1643512 - No exclamation icon when bond with an LACP is misconfigured
- BZ - 1643813 - Managing tags fails with ConcurrentModificationException
- BZ - 1643826 - Updating template of VM Pool leaves tasks stuck after VMs shutdown
- BZ - 1645007 - Foreman response is limited to 20 entries per call
- BZ - 1645383 - GetAllVmStatsVDSCommand sent host to Not-Responding status after upgrade
- BZ - 1646861 - Update gluster volume options set on the volume
- BZ - 1647226 - Bad SQL Grammar error
- BZ - 1647928 - Using 'setupnetworks' restapi call to update an existing network attachment does not work
- BZ - 1648190 - [RHEL76] libvirt is unable to start after upgrade due to malformed UTCTIME values in cacert.pem, because properly renewed CA certificate was not passed to hosts by executing "Enroll certificate" or "Reinstall"
- BZ - 1648417 - Command entities left in ACTIVE state after HostUpgradeCheckCommand
- BZ - 1649685 - After increase of ClusterCompatibilityVersion, an additional API-change will persist CustomerCompatibilityVersion to previous ClusterCompatibility Version
- BZ - 1650422 - "Penalizing host <> because it is not preferred" logs are shown for VMs even if there are no preferred hosts
- BZ - 1650551 - Log out of VM portal only works at the second try
- BZ - 1651140 - Bump EAP requirements from 7.1.3 to 7.2
- BZ - 1651225 - [RFE] RHEL 8 guest support
- BZ - 1651255 - Cannot set number of IO threads via the UI
- BZ - 1652533 - Engine UI Gives 404
- BZ - 1654442 - "GET_ALL_VNIC_PROFILES failed query execution failed due to insufficient permissions." messages when user logs into VM Portal
- BZ - 1654891 - Engine sent duplicate SnapshotVDSCommand, causing data corruption
- BZ - 1655375 - After upgrade to 4.2, admin portal host interface view does not load
- BZ - 1655659 - Engine failed to retrieve images list from ISO domain.
- BZ - 1655911 - guest pinned to hostA is show as up on both host after migration to hostB
- BZ - 1656881 - Security scanner detects "Unvalidated Redirects and Forwards (spider-param-unchecked-redirect)" vulnerability in RHVM 4.2
- BZ - 1657134 - RESTAPI Adding a storage domain with an empty description fails with "Storage Domain description must not exceed 4000 characters"
- BZ - 1657977 - [UI] Gray out multiQueues check box in Instance Types 'New/Edit' option - make it clear that enabled by default
- BZ - 1658249 - Importing a VM from OVA that has been imported already fails and its disk status becomes illegal
- BZ - 1661331 - Drop ovirt-engine-cli dependency
- BZ - 1663616 - usb forwarding does not work on VMs/templates created in 3.6 after upgrading to 4.2.7
- BZ - 1664342 - RHV WEB-GUI sorts disk Snapshots rows alphabetically.
- BZ - 1664490 - VM's time and TZ changes to GMT Standard Time after moving VM to another cluster.
- BZ - 1664540 - UserRole cannot Change CD on VM Portal
- BZ - 1666958 - [SR-IOV] - Validate the update of SR-IOV vNIC profile with another SR-IOV vNIC profile while the VM's nic is plugged
- BZ - 1667842 - Automatic Migration for Affinity Labels not working
- BZ - 1668720 - [RHV][REST api] Cluster href had changed in RHV-4.3 - It fails for some RHV-4.3 environments the CFME refresh.
- BZ - 1669367 - When changing disk settings, 'propagate_errors' value gets reset
- BZ - 1671564 - After upgrade to 4.2.8, Console Client Resources page doesn't look as expected
- BZ - 1676461 - engine-setup should mention WA for upgrade issues (ovirt-vmconsole)
- BZ - 1676822 - Cannot change Empty network profile of a running VM(default MTU)
- BZ - 1684140 - Import OVA failed to parse the OVF - Error loading ovf, message Content is not allowed in prolog
CVEs
(none)
References
(none)
Red Hat Virtualization Manager 4.3
SRPM | |
---|---|
ovirt-engine-4.3.3.3-0.1.el7.src.rpm | SHA-256: ef4677e9d34363686e9052e3a27b259282827aa886a9604bba110f9060621553 |
x86_64 | |
ovirt-engine-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: 415d01e0758fe803bf0cebd476fde8d2031e66cc3d91bdde3a3a865b1fb191d0 |
ovirt-engine-backend-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: 6843df3df32a1345c16e329e14d45c83877485d3af6d4d6c294dc19a723d8c1f |
ovirt-engine-dbscripts-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: debea74de78f086065a0a7b40f8cacd551699e938acb31d106d33f157640314c |
ovirt-engine-extensions-api-impl-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: 7b925371d4acb172f7c3cee843ca7fd5c4f8a2ec1727022b1145c251ba5aad99 |
ovirt-engine-extensions-api-impl-javadoc-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: a3c6b9376e797c586b336b4e84c5dd220d949062f7c67b9cd733ab91d57bb1c5 |
ovirt-engine-health-check-bundler-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: c8e545ced79b84e897552b2a6611defe522e9b44044f8bc7a86af400ebf80a82 |
ovirt-engine-restapi-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: 99a6c5c1202437dcaae5dd32a5fba1eaa9eb0ae88172a8d3c9b2203511b2b35c |
ovirt-engine-setup-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: ae7656c0c196d5288755bef80f01d8438138671076803fdcfcd087475a3b6d0e |
ovirt-engine-setup-base-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: 80f2f5ca6189caf4b40714d63e72644e9c7cd1655727bafac26909481c7c34d1 |
ovirt-engine-setup-plugin-cinderlib-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: fa9bb5a990d0a4af1477e794a707a0b7fea6a5bf88ba1e0ca42339f71571e02d |
ovirt-engine-setup-plugin-ovirt-engine-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: 1f9a4bf9302bb19da768acacb9c8d72c28dd3fad7406400ef2726e87f753a450 |
ovirt-engine-setup-plugin-ovirt-engine-common-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: fe3dc3559d26c379fe88ea856b41b6d202bb6cd60fda0c7138578facbcf8a7d7 |
ovirt-engine-setup-plugin-vmconsole-proxy-helper-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: 799e6ea38931b71ced9e604974b78c66b4a1c4eb9bde700e20c68a99eb626594 |
ovirt-engine-setup-plugin-websocket-proxy-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: dca01f9cca12003cf53ce41c80c374f7d92a665f20853cb9f6a8d3c4511b69d3 |
ovirt-engine-tools-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: a221234621ac8b7d1a75c1b5c7a9a8166f876b4280e91872405b97c3299f27fe |
ovirt-engine-tools-backup-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: d5113511a4e109d6aecdb57846c0fab315ecd268ea73df2d0f0efe944deb84ea |
ovirt-engine-vmconsole-proxy-helper-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: c3a1e0b385426d22e9bbafc8e725b68bc324cc975cc0e1a74aacba24fab0a786 |
ovirt-engine-webadmin-portal-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: c6ecdcae10749be1d0b56da649fcccdcb6a8468985a52ec03b0ff4eb76d78fb6 |
ovirt-engine-websocket-proxy-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: 67b587ad66cb2c44351bd701e21473eab37885e476129ec6c92f1b77d65018f5 |
python2-ovirt-engine-lib-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: f2deae75073c4fc0cdae18eef1cd3eb80e9fab99e2cdb637965ee439cb0c8f25 |
rhvm-4.3.3.3-0.1.el7.noarch.rpm | SHA-256: 34144bce1db0ff3f6c8a8a08c61226a236d71ba9f90a65695abec7b1eac1f9d7 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.