On June 23rd 2022 the oVirt project released an update of oVirt Node (4.5.1) delivering several security fixes, bug fixes and enhancements.

The update is already available on resources.ovirt.org and should land on oVirt mirrors within 24 hours.

With oVirt 4.5.1 oVirt Node based on CentOS Stream 9 is also available as a tech preview.

Known issues:

  • On oVirt Node based on CentOS Stream 9 with UEFI secure boot, vdsm fails to decode DMI data due to Bug 2081648 – python-dmidecode module fails to decode DMI data

Updates on el8 based oVirt Node:

Security fixes:

  • Important – Bug 2082616 – CVE-2022-24903 – rsyslog: Heap-based overflow in TCP syslog server

  • Important – Bug 2072376 – CVE-2018-25032 – zlib: A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs.

  • Important – Bug 2065568 – CVE-2022-27666 – kernel: buffer overflow in IPsec ESP transformation code

Other updates:

  • CentOS Stream 8 latest updates

  • Full list of changes compared to oVirt Node 4.5.0.3:

oVirt Node 4.5.0.3 oVirt Node 4.5.1

NetworkManager 1.39.3-1.el8 1.39.5-1.el8

NetworkManager-config-server 1.39.3-1.el8 1.39.5-1.el8

NetworkManager-libnm 1.39.3-1.el8 1.39.5-1.el8

NetworkManager-ovs 1.39.3-1.el8 1.39.5-1.el8

NetworkManager-team 1.39.3-1.el8 1.39.5-1.el8

NetworkManager-tui 1.39.3-1.el8 1.39.5-1.el8

binutils 2.30-114.el8 2.30-116.el8

centos-release-ovirt45 8.7-1.el8s 8.7-2.el8s

cockpit 264.1-1.el8 270-1.el8

cockpit-bridge 264.1-1.el8 270-1.el8

cockpit-storaged 264.1-1.el8 269-1.el8

cockpit-system 264.1-1.el8 270-1.el8

cockpit-ws 264.1-1.el8 270-1.el8

cronie 1.5.2-6.el8 1.5.2-7.el8

cronie-anacron 1.5.2-6.el8 1.5.2-7.el8

cups-libs 2.2.6-45.el8

device-mapper-multipath 0.8.4-23.el8 0.8.4-25.el8

device-mapper-multipath-libs 0.8.4-23.el8 0.8.4-25.el8

dnf 4.7.0-9.el8 4.7.0-10.el8

dnf-data 4.7.0-9.el8 4.7.0-10.el8

dracut 049-201.git20220131.el8 049-202.git20220511.el8

dracut-config-generic 049-201.git20220131.el8 049-202.git20220511.el8

dracut-live 049-201.git20220131.el8 049-202.git20220511.el8

dracut-network 049-201.git20220131.el8 049-202.git20220511.el8

dracut-squash 049-201.git20220131.el8 049-202.git20220511.el8

e2fsprogs 1.45.6-4.el8 1.45.6-5.el8

e2fsprogs-libs 1.45.6-4.el8 1.45.6-5.el8

elfutils-default-yama-scope 0.186-1.el8 0.187-4.el8

elfutils-libelf 0.186-1.el8 0.187-4.el8

elfutils-libs 0.186-1.el8 0.187-4.el8

fence-agents-all 4.2.1-94.el8 4.2.1-97.el8

fence-agents-amt-ws 4.2.1-94.el8 4.2.1-97.el8

fence-agents-apc 4.2.1-94.el8 4.2.1-97.el8

fence-agents-apc-snmp 4.2.1-94.el8 4.2.1-97.el8

fence-agents-bladecenter 4.2.1-94.el8 4.2.1-97.el8

fence-agents-brocade 4.2.1-94.el8 4.2.1-97.el8

fence-agents-cisco-mds 4.2.1-94.el8 4.2.1-97.el8

fence-agents-cisco-ucs 4.2.1-94.el8 4.2.1-97.el8

fence-agents-common 4.2.1-94.el8 4.2.1-97.el8

fence-agents-compute 4.2.1-94.el8 4.2.1-97.el8

fence-agents-drac5 4.2.1-94.el8 4.2.1-97.el8

fence-agents-eaton-snmp 4.2.1-94.el8 4.2.1-97.el8

fence-agents-emerson 4.2.1-94.el8 4.2.1-97.el8

fence-agents-eps 4.2.1-94.el8 4.2.1-97.el8

fence-agents-heuristics-ping 4.2.1-94.el8 4.2.1-97.el8

fence-agents-hpblade 4.2.1-94.el8 4.2.1-97.el8

fence-agents-ibmblade 4.2.1-94.el8 4.2.1-97.el8

fence-agents-ifmib 4.2.1-94.el8 4.2.1-97.el8

fence-agents-ilo-moonshot 4.2.1-94.el8 4.2.1-97.el8

fence-agents-ilo-mp 4.2.1-94.el8 4.2.1-97.el8

fence-agents-ilo-ssh 4.2.1-94.el8 4.2.1-97.el8

fence-agents-ilo2 4.2.1-94.el8 4.2.1-97.el8

fence-agents-intelmodular 4.2.1-94.el8 4.2.1-97.el8

fence-agents-ipdu 4.2.1-94.el8 4.2.1-97.el8

fence-agents-ipmilan 4.2.1-94.el8 4.2.1-97.el8

fence-agents-kdump 4.2.1-94.el8 4.2.1-97.el8

fence-agents-mpath 4.2.1-94.el8 4.2.1-97.el8

fence-agents-redfish 4.2.1-94.el8 4.2.1-97.el8

fence-agents-rhevm 4.2.1-94.el8 4.2.1-97.el8

fence-agents-rsa 4.2.1-94.el8 4.2.1-97.el8

fence-agents-rsb 4.2.1-94.el8 4.2.1-97.el8

fence-agents-sbd 4.2.1-94.el8 4.2.1-97.el8

fence-agents-scsi 4.2.1-94.el8 4.2.1-97.el8

fence-agents-vmware-rest 4.2.1-94.el8 4.2.1-97.el8

fence-agents-vmware-soap 4.2.1-94.el8 4.2.1-97.el8

fence-agents-wti 4.2.1-94.el8 4.2.1-97.el8

glibc 2.28-200.el8 2.28-203.el8

glibc-common 2.28-200.el8 2.28-203.el8

glibc-langpack-en 2.28-200.el8 2.28-203.el8

kernel 4.18.0-383.el8 4.18.0-394.el8

kernel-core 4.18.0-383.el8 4.18.0-394.el8

kernel-modules 4.18.0-383.el8 4.18.0-394.el8

kernel-tools 4.18.0-383.el8 4.18.0-394.el8

kernel-tools-libs 4.18.0-383.el8 4.18.0-394.el8

kexec-tools 2.0.24-1.el8 2.0.24-2.el8

kpartx 0.8.4-23.el8 0.8.4-25.el8

libbasicobjects 0.1.1-39.el8 0.1.1-40.el8

libcap 2.48-2.el8 2.48-4.el8

libcollection 0.7.0-39.el8 0.7.0-40.el8

libcom_err 1.45.6-4.el8 1.45.6-5.el8

libdhash 0.5.0-39.el8 0.5.0-40.el8

libini_config 1.3.1-39.el8 1.3.1-40.el8

libldb 2.4.1-1.el8 2.5.0-1.el8

libpath_utils 0.2.1-39.el8 0.2.1-40.el8

libref_array 0.1.5-39.el8 0.1.5-40.el8

libss 1.45.6-4.el8 1.45.6-5.el8

libtdb 1.4.4-1.el8 1.4.6-1.el8

libtevent 0.11.0-0.el8 0.12.0-0.el8

libwbclient 4.15.5-8.el8 4.16.1-0.el8

mesa-dri-drivers 21.3.4-1.el8 21.3.4-1.0.1.el8

mesa-filesystem 21.3.4-1.el8 21.3.4-1.0.1.el8

mesa-libEGL 21.3.4-1.el8 21.3.4-1.0.1.el8

mesa-libGL 21.3.4-1.el8 21.3.4-1.0.1.el8

mesa-libgbm 21.3.4-1.el8 21.3.4-1.0.1.el8

mesa-libglapi 21.3.4-1.el8 21.3.4-1.0.1.el8

nmap-ncat 7.70-6.el8 7.70-7.el8

openvswitch-selinux-extra-policy 1.0-28.el8 1.0-29.el8s

osinfo-db 20211216-1.el8 20220516-1.el8

ovirt-ansible-collection 2.0.3-1.el8 2.1.0-1.el8

ovirt-hosted-engine-setup 2.6.3-1.el8 2.6.4-1.el8

ovirt-imageio-client 2.4.3-1.el8 2.4.5-1.el8

ovirt-imageio-common 2.4.3-1.el8 2.4.5-1.el8

ovirt-imageio-daemon 2.4.3-1.el8 2.4.5-1.el8

ovirt-node-ng-image-update-placeholder 4.5.0.3-1.el8 4.5.1-1.el8

ovirt-release-host-node 4.5.0.3-1.el8 4.5.1-1.el8

pacemaker-cluster-libs 2.1.2-4.el8 2.1.3-1.el8

pacemaker-libs 2.1.2-4.el8 2.1.3-1.el8

pacemaker-schemas 2.1.2-4.el8 2.1.3-1.el8

pam 1.3.1-16.el8 1.3.1-20.el8

python3-dnf 4.7.0-9.el8 4.7.0-10.el8

python3-perf 4.18.0-383.el8 4.18.0-394.el8

python38-ovirt-imageio-client 2.4.3-1.el8 2.4.5-1.el8

python38-ovirt-imageio-common 2.4.3-1.el8 2.4.5-1.el8

rpcbind 1.2.5-8.el8 1.2.5-9.el8

rsyslog 8.2102.0-9.el8 8.2102.0-10.el8

rsyslog-elasticsearch 8.2102.0-9.el8 8.2102.0-10.el8

rsyslog-mmjsonparse 8.2102.0-9.el8 8.2102.0-10.el8

rsyslog-mmnormalize 8.2102.0-9.el8 8.2102.0-10.el8

rsyslog-openssl 8.2102.0-9.el8 8.2102.0-10.el8

samba-client-libs 4.15.5-8.el8 4.16.1-0.el8

samba-common 4.15.5-8.el8 4.16.1-0.el8

samba-common-libs 4.15.5-8.el8 4.16.1-0.el8

scap-security-guide 0.1.60-7.el8 0.1.60-9.el8

selinux-policy 3.14.3-98.el8 3.14.3-99.el8

selinux-policy-targeted 3.14.3-98.el8 3.14.3-99.el8

sos 4.2-15.el8 4.3-1.el8

vdsm 4.50.0.13-1.el8 4.50.1.4-1.el8

vdsm-api 4.50.0.13-1.el8 4.50.1.4-1.el8

vdsm-client 4.50.0.13-1.el8 4.50.1.4-1.el8

vdsm-common 4.50.0.13-1.el8 4.50.1.4-1.el8

vdsm-gluster 4.50.0.13-1.el8 4.50.1.4-1.el8

vdsm-http 4.50.0.13-1.el8 4.50.1.4-1.el8

vdsm-jsonrpc 4.50.0.13-1.el8 4.50.1.4-1.el8

vdsm-network 4.50.0.13-1.el8 4.50.1.4-1.el8

vdsm-python 4.50.0.13-1.el8 4.50.1.4-1.el8

vdsm-yajsonrpc 4.50.0.13-1.el8 4.50.1.4-1.el8

yum 4.7.0-9.el8 4.7.0-10.el8

zlib 1.2.11-17.el8 1.2.11-19.el8

Additional resources: