Advisory Published

RHBA-2020:2396: Red Hat Virtualization Engine security, bug fix 4.3.10

First published: Thu Jun 04 2020(Updated: )

The ovirt-engine package provides the Red Hat Virtualization Manager, a<br>centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities, resource management, live migrations, and virtual infrastructure provisioning.<br>The Manager is a JBoss Application Server application that provides several interfaces through which the virtual environment can be accessed and interacted with, including an Administration Portal, a VM Portal, and a Representational State Transfer (REST) Application Programming Interface (API).<br>PostgreSQL is an open-source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. <br>Changes to the ovirt-engine component:<br><li> Previously, a new DB was introduced as part of the cinderlib (managed block storage) support, but did not include a backup and restore option. The current release fixes this issue by providing a backup and restore option. (BZ#1820642)</li> <li> Previously, the landing page for the RHV Manager did not support scrolling. As a result, with specific resolutions or zoom ratios, some areas of the landing page were not visible, including the link to the Administration Portal. The current release fixes this issue by enabling users to scroll the landing page and access any of the links on it. (BZ#1796136)</li> <li> Previously, using the Administration Portal to import a storage domain omitted custom mount options for NFS storage servers. The current release fixes this issue by including the custom mount options. (BZ#1828067)</li> Changes to the Documentation component:<br><li> The current release adds support for installing Red Hat OpenShift Container Platform (RHOCP) version 4.4 on Red Hat Virtualization (RHV). The installer that deploys RHOCP on RHV automates the process using “installer-provisioned infrastructure.” This installer is available for Linux and macOS only. The resulting RHOCP cluster runs the master and worker nodes on virtual machines in RHV. (BZ#1764779)</li>

Affected SoftwareAffected VersionHow to fix
redhat/ovirt-engine<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/rh-postgresql10-postgresql<10.12-2.el7
10.12-2.el7
redhat/ovirt-engine<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-backend<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-dbscripts<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-extensions-api-impl<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-extensions-api-impl-javadoc<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-health-check-bundler<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-restapi<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-setup<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-setup-base<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-setup-plugin-cinderlib<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-setup-plugin-ovirt-engine<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-setup-plugin-ovirt-engine-common<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-setup-plugin-vmconsole-proxy-helper<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-setup-plugin-websocket-proxy<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-tools<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-tools-backup<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-vmconsole-proxy-helper<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-webadmin-portal<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/ovirt-engine-websocket-proxy<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/python2-ovirt-engine-lib<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7
redhat/rh-postgresql10-postgresql<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-contrib<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-contrib-syspaths<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-debuginfo<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-devel<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-docs<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-libs<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-plperl<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-plpython<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-pltcl<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-server<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-server-syspaths<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-static<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-syspaths<10.12-2.el7
10.12-2.el7
redhat/rh-postgresql10-postgresql-test<10.12-2.el7
10.12-2.el7
redhat/rhvm<4.3.10.3-0.2.el7
4.3.10.3-0.2.el7

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203