OTC Public Images Release Notes July 2021

Windows

Updated Microsoft Windws Server Images with current NVIDIA dirver of July 2021 (21th)

https://nvidia.custhelp.com/app/answers/detail/a_id/5211 NVIDIA published Security Bulletin: NVIDIA GPU Display Drivers - July 2021 and new display drivers. Please redeploy your GPU servers to get the latest display drivers:

• NVIDIA V100 / T4 driver: 427.48 (fixes CVE‑2021‑1089, CVE‑2021‑1090, CVE‑2021‑1092, CVE‑2021‑1093, CVE‑2021‑1094, CVE‑2021‑1095, CVE‑2021‑1096)

Updated Microsoft Windws Server Images with current Microsoft Windows Server Patches of July 2021 (14th)

• Windows Server 2012 R2

  • 2021-07 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB5004958)
  • 2021-07 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 for x64-based systems (KB5004233)
  • 2021-07 Security Only Quality Update for Windows Server 2012 R2 for x64-based Systems (KB5004285)
  • 2021-07 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB5004298)

• Windows Server 2016

  • 2021-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5004238)

• Windows Server 2019

  • 2021-07 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5004244)
  • 2021-07 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB5004228)

• Driver and tools of all Windows Server types

• Cloudbase-Init: 0.9.12.dev86

• KVM UVP Vmtools: 2.5.0.156

• Intel(R) Network Connections Software Version 25.0, January 2, 2020

• NVIDIA V100 / T4 driver: 427.33 (fixes CVE‑2021‑1075, CVE‑2021‑1076, CVE‑2021‑1078, CVE‑2021‑1081)

Linux

New image release - Rocky Linux 8.4 Preview release

• Rocky 8.4 is available as Rocky_8_Preview_latest.
• Default username is “linux”.
• Currently ECS flavors supported.
• Official Rocky page

CentOS 8.4 released

CentOS Stream 8.5 released

openSUSE 15.3 update released

• Note that there are 2 new update repos added for openSUSE 15.3 as per openSUSE 15.3 official release notes. These repos are re-using binaries from SUSE Linux Enterprise.

• Official release notes from SUSE could be found here.

• As before, we lock the cloud-init package to avoid any possible boot issues. The lock could be removed if needed.

• Some packages that are installed from our own OBS builds are not upgraded when ‘zypper up’ is run because we set a higher precedence for our OBS based repos.

    # zypper up
    Loading repository data...
    Reading installed packages...
  
    The following item is locked and will not be changed by any action:
     Installed:
      cloud-init
  
    The following 12 package updates will NOT be installed:
      dd_rescue dd_rescue-crypt dd_rescue-lzo jq libjq1 libs3-4 pwgen python3-decorator python3-os-service-types python3-oslo.serialization python3-pbr python3-zipp
    Nothing to do.

• Below we can see that for instance a higher (1.99.8-1.2) version of dd_rescue-lzo is available but zypper is not upgrading it because OTC-Cloud_OTC_Tools_Extra_openSUSE_Leap_15.3 has precedence.

    # zypper search -s dd_rescue-lzo
    Loading repository data...
    Reading installed packages...
  
    S  | Name          | Type    | Version               | Arch   | Repository
    ---+---------------+---------+-----------------------+--------+---------------------------------------------
    i+ | dd_rescue-lzo | package | 1.99_0.3.0-lp153.84.1 | x86_64 | OTC-Cloud_OTC_Tools_Extra_openSUSE_Leap_15.3
    v  | dd_rescue-lzo | package | 1.99.8-1.2            | x86_64 | OTC-openSUSE_Leap_15.3_standard