RHEA-2024:8140 - Product Enhancement Advisory

Topic

Red Hat OpenShift Virtualization release 4.17.0 is now available with updates to packages and images that fix several bugs and add enhancements.

Description

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.

This advisory contains OpenShift Virtualization 4.17.0 images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Container Native Virtualization 4.17 for RHEL 9 x86_64
• Red Hat Container Native Virtualization 4.17 for RHEL 8 x86_64
• Red Hat Container Native Virtualization for ARM 64 4.17 for RHEL 9 aarch64
• Red Hat Container Native Virtualization for ARM 64 4.17 for RHEL 8 aarch64

Fixes

• CNV-41589 - Error "Cannot read properties of undefined (reading 'push')" on creation of a VM with Sysprep
• CNV-41205 - [RFE] Add disk list in VM delete modal
• CNV-41202 - The "About" shows a wrong Kubevirt-plugin version
• CNV-39688 - No volumesnapshot created when deleting the DV with snapshot format dataimportcron
• CNV-37607 - "Upload data" dialog does not work in PVC -> "With Data upload form"
• CNV-31903 - Edit popover text to Dynamic injection help icon
• CNV-42368 - A search icon appears in node selector labels
• CNV-41686 - Cannot change bootmode while customize VM from instanceType
• CNV-41586 - Cannot save sysprep while customize VM from instanceType
• CNV-38101 - "Boot management" became folded after editing something on the page
• CNV-41633 - Filter is cleared when no matching VMs found on VM list
• CNV-40606 - [4.17] VMExport download VM manifest - has both "source" and "sourceRef" - results in cloning a DataSource instead of exporting a source PVC
• CNV-42316 - VM Metrics page is lacking Y axis
• CNV-41776 - Console is showing incorrect value's for disks attached to VMs
• CNV-43078 - LUN type is greyed out from UI
• CNV-43068 - Catalog -> "Add volume" should be enabled for regular user
• CNV-38284 - UI settings should not be stored in default namespace
• CNV-43120 - Failed to create windows VM with sysprep from instanceType
• CNV-43115 - Remove cloud-init disk while creating windows VM from instanceType
• CNV-42218 - Failed to start VM after adding multiple vGPUs in web console
• CNV-25171 - [2168195] 563GiB disk is shown as 512KiB in the console
• CNV-43667 - Clipboardtext is undefined
• CNV-43591 - Add bootable volume button and dialog titles don't match
• CNV-43310 - No link provide for creating bootable volume by using pipeline
• CNV-43245 - Create VM from custom template with "runStrategy: RerunOnFailure" generates error
• CNV-43091 - Update UI to reflect that node affinity does not require restart
• CNV-42317 - VM Metrics time range selector has strange ordering
• CNV-41738 - Remove PVC from bootable volume
• CNV-39660 - [RFE] Improve "Auto-compute CPU limits"
• CNV-38598 - Network checkup pod is not deleted even the checkup is deleted
• CNV-22930 - [2148837] Limits are not changed/no options to change the limits while increasing/decreasing the virtual machine resources from GUI
• CNV-38478 - When creating a NAD with topology and switching to yaml the additional fields are missing
• CNV-43742 - Get error msg if change interface model from UI
• CNV-42852 - Creating VM from custom Boot Source writes cloud-init config with "fedora" username for all kinds of OS
• CNV-39141 - Downloading virtctl memory-dump results in empty tar file.
• CNV-43172 - User is not allowed to execute the storage checkup from UI
• CNV-43114 - Sysprep disk is marking as bootable disk
• CNV-41832 - Hotplug disk dialog displays incorrect volume/access modes when greyed out
• CNV-42080 - Error while adding windows volume from existing PVC
• CNV-40981 - KubeVirtVMIExcessiveMigrations calculation is wrong
• CNV-43176 - The destination project is "default" in add volume modal
• CNV-40092 - UI should use type "bridge" instead of "cnv-bridge"
• CNV-42007 - wrong metric behavior "kubevirt_vmi_number_of_outdated"
• CNV-40312 - OpenShift CNV Validation Images for RHOCP 4.14 and 4.15 contain wrong architecture executable code
• CNV-36913 - Backend storage PVC (persistent TPM) can't be created on trident ontap
• CNV-41608 - Instancetype expand-spec missing devices
• CNV-28038 - [2186257] DPDK checkup should be based on RHEL 9
• CNV-44838 - Can't extend the virtual machine details page with tabs
• CNV-44514 - Missing descriptive names inside the InstanceTypes tiles
• CNV-44420 - Console is crashed while deleting cloud-init disk
• CNV-43101 - VM and Catalog pages are stuck loading
• CNV-41592 - unexpected behavior on '/' on creating a VM with sysprep
• CNV-41591 - unexpected "headless" on creating a VM with sysprep
• CNV-41587 - "Dynamic SSH key injection is not enabled in this virtual machine" always appears
• CNV-31358 - The OVN Kubernetes L2 overlay network is created incorrectly
• CNV-45383 - When a default template is being cloned it becomes a default template again
• CNV-45462 - replace npx cypress with direct binary file
• CNV-45428 - Cannot select preference in add volume modal
• CNV-45000 - Cannot set/unset bootable flag on rootdisk
• CNV-44913 - Unable to select root disk StorageClass in UI when creating VM from template
• CNV-44355 - Eviction of Completed vmi pod triggers a live migration
• CNV-44855 - instancetype.kubevirt.io/v1alpha2 VirtualMachineClusterPreferences is now deprecated
• CNV-43005 - 'disk size is not 1MiB-aligned' flooding logs
• CNV-40217 - Available space is less than virtual image size while creating VMs from templates on Portworx filesystem volumes
• CNV-45002 - "Start this VirtualMachine after creation" is not checked by default
• CNV-43119 - Can't add host usb device in hco config
• CNV-44843 - PVC created in default project instead of specified project when uploading data as CD source
• CNV-44326 - Destination project is wrong while adding bootable volume
• CNV-46318 - The namespace of VMI link in VM overview tab is "all-namespaces"
• CNV-46255 - [4.17] virtctl vmexport download deletes the vmexport if --vm flag is used
• CNV-42921 - VirtualMachinePool: Validating webhook panics when spec.template.spec.domain.cpu is nil
• CNV-46286 - "Cannot allocate memory" warnings for containerdisk VMs
• CNV-44306 - Default YAML is broken for example VM
• CNV-42076 - [4.17] DV gets recreated if the VM is in Stopped and DV was deleted [regression]
• CNV-46743 - Checkups page is missing in 4.17
• CNV-46740 - VirtualMachine is missing in the inventory of cluster overview and project page
• CNV-45873 - Gaps between node-exporter on a VM and the kubevirt metrics
• CNV-45853 - [CNV 4.17.0] - Remove DataImportCron for CentOS 7 and Stream 8
• CNV-43200 - namespace admins should be able to pass a client usb to their VM
• CNV-43140 - AAQ Aftersuite spec fails on d/s env
• CNV-43045 - multiple AAQ upstream tests fail on d/s env due to PSA
• CNV-47186 - switch from namespace to priority for swap configuration
• CNV-45479 - Race during populator rebind causing extra pvc' to be left behind
• CNV-47055 - Miss QEMU driver for USB host pass through
• CNV-48654 - No showing storage class in disk table
• CNV-47576 - headless service already exisit error message
• CNV-47511 - Editing NIC in UI uses wrong binding and does not allow changing MAC
• CNV-47244 - Storage checkup "install permissions" button is clickable when lacking permissions
• CNV-47229 - Move the config of registry together in the add volume modal
• CNV-46396 - The order of metrics in Overview page is changed
• CNV-42324 - Disk devices for root disks indicate default storage class instead of virtualization storage class
• CNV-45455 - [CNV-4.17]Windows2k12r2 os can't boot up from 4.16 onwards
• CNV-47737 - Unable to express `spec.domain.firmware.bootloader.efi.persistent` with preferences
• CNV-48805 - Create new Preferences for Windows Server 2025
• CNV-46725 - CDI builder image's bazel binary is missing executable permissions for unprivilieged users
• CNV-48839 - InstanceTypes and Prefereces are not aligned between Administrator and Virtualization perspective
• CNV-48785 - "Create VirtualMachine" never finish if set boot disk size
• CNV-48521 - Iso-Flow: Root disk is hard coded to SATA
• CNV-48519 - Iso-Flow: Boot disk size should be applied to the root disk
• CNV-48314 - "Apply optimized StorageProfile settings" is not checked while adding new disk
• CNV-48259 - NodeNetworkConfigurationPolicy and NodeNetworkState are missing in Virtualization perspective
• CNV-48224 - OpenShift Virt doc link needs to be changed in the new Guided Tour
• CNV-48155 - VM with attached sysprep fails to create
• CNV-47291 - public ssh key credential does not get created
• CNV-47206 - Change PVC to volume in add volume modal
• CNV-47153 - [e2e] Add data-test-id for items in add volume modal
• CNV-46584 - "Boot Disk Size" in InstanceTypes vs "Disk Size" in Templates in the UI
• CNV-45815 - No volumes found for nonpriv user in All projects
• CNV-45253 - No color in the virtual machine migration graph legend
• CNV-43038 - Improve sysprep section in quick and customize mode
• CNV-41496 - Template CPU Resource Requests Doubled Unexpectedly
• CNV-41401 - Pending message for new added disks is not gone after restart the VM when the VM is created from instanceTypes
• CNV-41290 - Disable "Install permissions" button if regular user cannot install the permissions
• CNV-40099 - Force shutdown is not available when the VM is terminating
• CNV-39736 - NAD Resource Icon is not an icon
• CNV-39710 - Update Windows-11 IT/Preferences to reflect TPM to be persistent:True
• CNV-39707 - Update Windows-11 templates to reflect TPM to be persistent:True
• CNV-48451 - Windows autoattend.xml can not be created as a regular user

CVEs

• CVE-2007-4559
• CVE-2021-3826
• CVE-2021-35937
• CVE-2021-35938
• CVE-2021-35939
• CVE-2021-43618
• CVE-2022-48468
• CVE-2022-48554
• CVE-2023-2975
• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-4016
• CVE-2023-4641
• CVE-2023-5678
• CVE-2023-5981
• CVE-2023-6129
• CVE-2023-6237
• CVE-2023-6597
• CVE-2023-7008
• CVE-2023-7104
• CVE-2023-22745
• CVE-2023-27043
• CVE-2023-27533
• CVE-2023-27534
• CVE-2023-27536
• CVE-2023-27538
• CVE-2023-29491
• CVE-2023-29499
• CVE-2023-32611
• CVE-2023-32665
• CVE-2023-36054
• CVE-2023-38545
• CVE-2023-38546
• CVE-2023-39975
• CVE-2023-43804
• CVE-2023-44487
• CVE-2023-45803
• CVE-2023-46218
• CVE-2023-52425
• CVE-2023-52463
• CVE-2023-52801
• CVE-2024-0450
• CVE-2024-0553
• CVE-2024-0567
• CVE-2024-0727
• CVE-2024-1737
• CVE-2024-1975
• CVE-2024-2398
• CVE-2024-2961
• CVE-2024-3651
• CVE-2024-4032
• CVE-2024-4076
• CVE-2024-6345
• CVE-2024-6923
• CVE-2024-7383
• CVE-2024-22365
• CVE-2024-24806
• CVE-2024-26629
• CVE-2024-26630
• CVE-2024-26720
• CVE-2024-26886
• CVE-2024-26946
• CVE-2024-28182
• CVE-2024-28757
• CVE-2024-28834
• CVE-2024-28835
• CVE-2024-33599
• CVE-2024-33600
• CVE-2024-33601
• CVE-2024-33602
• CVE-2024-34397
• CVE-2024-35791
• CVE-2024-35797
• CVE-2024-35875
• CVE-2024-36000
• CVE-2024-36019
• CVE-2024-36883
• CVE-2024-36979
• CVE-2024-37370
• CVE-2024-37371
• CVE-2024-37891
• CVE-2024-38428
• CVE-2024-38559
• CVE-2024-38619
• CVE-2024-40927
• CVE-2024-40936
• CVE-2024-41040
• CVE-2024-41044
• CVE-2024-41055
• CVE-2024-41073
• CVE-2024-41096
• CVE-2024-42082
• CVE-2024-42096
• CVE-2024-42102
• CVE-2024-42131
• CVE-2024-45490
• CVE-2024-45491
• CVE-2024-45492

References

(none)