RHSA-2010:0440: Important: rhev-hypervisor security and bug fix update

The rhev-hypervisor package provides a Red Hat Enterprise Virtualization(RHEV) Hypervisor ISO disk image. The RHEV Hypervisor is a dedicatedKernel-based Virtual Machine (KVM) hypervisor. It includes everythingnecessary to run and manage virtual machines: A subset of the Red HatEnterprise Linux operating environment and the Red Hat EnterpriseVirtualization Agent.Note: RHEV Hypervisor is only available for the Intel 64 and AMD64architectures with virtualization extensions.It was discovered that OpenSSL did not always check the return value ofthe bnwexpand() function. An attacker able to trigger a memory allocationfailure in that function could cause an application using the OpenSSLlibrary to crash or, possibly, execute arbitrary code. (CVE-2009-3245)A flaw was found in the way the TLS/SSL (Transport Layer Security/SecureSockets Layer) protocols handled session renegotiation. A man-in-the-middleattacker could use this flaw to prefix arbitrary plain text to a client'ssession (for example, an HTTPS connection to a website). This could forcethe server to process an attacker's request as if authenticated using thevictim's credentials. This update addresses this flaw in openssl, nss, andgnutls by implementing the TLS Renegotiation Indication Extension, asdefined in RFC 5746. (CVE-2009-3555)This updated package provides updated components that include fixes forsecurity issues; however, these issues have no security impact for RHEVHypervisor. These fixes are for kernel issues CVE-2009-4307, CVE-2010-0727,CVE-2009-4027, and CVE-2010-1188; cpio issues CVE-2010-0624 andCVE-2007-4476; gnutls issue CVE-2009-2409; openssl issue CVE-2010-0433; andtar issues CVE-2010-0624 and CVE-2007-4476.This update also fixes the following bugs: bridged network interfaces using the bnx2x, mlx4en, enic and s2io drivers had Large Receive Offload (LRO) enabled by default. This causedsignificantly degraded network I/O performance. LRO has been disabled forall network interface drivers which have LRO enabled by default in Red HatEnterprise Linux 5. With this change, network I/O performance issignificantly improved. (BZ#576374, BZ#579730) RHEV Hypervisor supported IPv6, but as this is not used to communicate with the RHEV Manager, it is superfluous. Support for IPv6 has now beendisabled in RHEV Hypervisor. (BZ#577300) for VLAN interfaces, the hardware (MAC) address of the interface was set only in the VLAN ifcfg script, not in the physical interface ifcfg script.This caused network interfaces with VLAN tags to intermittently fail onboot. The MAC address is now set in the ifcfg script for the underlyingphysical interface. Network interfaces with VLAN tags now work consistentlybetween reboots. (BZ#581876) the hypervisor would hang on reboot after repeated upgrade operations, due to GRUB accessing the /boot file system before it was flushed. The/boot file system is now remounted before GRUB accesses it. (BZ#591111)As RHEV Hypervisor is based on KVM, the bug fixes from the KVM updateRHBA-2010:0434 have been included in this update. Also included are the bugfixes from the RHEV Manager Agent (VDSM) update RHBA-2010:0435.KVM: https://rhn.redhat.com/errata/RHBA-2010-0434.html VDSM: https://rhn.redhat.com/errata/RHBA-2010-0435.html Users of the Red Hat Enterprise Virtualization Hypervisor are advised toupgrade to this updated package, which corrects these issues.