RHSA-2023:4982 - Security Advisory

Topic

Red Hat OpenShift Virtualization release 4.12.6 is now available with updates to packages and images that fix several bugs and add enhancements.

Description

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.

This advisory contains OpenShift Virtualization 4.12.6 images.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Container Native Virtualization 4.12 for RHEL 8 x86_64
• Red Hat Container Native Virtualization 4.12 for RHEL 7 x86_64

Fixes

• BZ - 2139896 - Requested TSC frequency outside tolerance range & TSC scaling not supported
• BZ - 2145146 - CDI operator is not creating PrometheusRule resource with alerts if CDI resource is incorrect
• BZ - 2148383 - Migration metrics values are not sum up values from all VMIs
• BZ - 2149409 - HPP mounter deployment can't mount as unprivileged
• BZ - 2168489 - Overview -> Migrations - The ?Bandwidth consumption? Graph display with wrong values
• BZ - 2184435 - [cnv-4.12] virt-handler should not delete any pre-configured mediated devices i these are provided by an external provider
• BZ - 2222191 - [cnv-4.12] manually increasing the number of virt-api pods does not work

CVEs

• CVE-2016-3709
• CVE-2022-4304
• CVE-2022-4450
• CVE-2023-0215
• CVE-2023-0361
• CVE-2023-2602
• CVE-2023-2603
• CVE-2023-3899
• CVE-2023-27536
• CVE-2023-28321
• CVE-2023-28484
• CVE-2023-29469
• CVE-2023-32681
• CVE-2023-34969
• CVE-2023-38408

References

• https://access.redhat.com/security/updates/classification/#moderate