RHSA-2020:4114: Moderate: Red Hat Virtualization security and bug fix update

Published Sep 30, 2020
·
Updated

ovirt-ansible-repositories is an Ansible role used to set up the repositories required for oVirt engine or host installation.The openvswitch package contains components for enabling Open vSwitch; a software-based Ethernet virtual switch. It also includes OVN (Open Virtual Network) components for supporting virtual network abstraction. The Red Hat Virtualization Python SDK is a program that simplifies access to the Red Hat Virtualization API by providing an object-oriented view to developers.Security Fix(es): dpdk: librtevhost Interger overflow in vhostusersetlogbase() (CVE-2020-10722) dpdk: librtevhost Integer truncation in vhostusercheckandallocqueuepair() (CVE-2020-10723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): Previously, during RHHI-V deployment of 3 hosts using ovirt-ansible-hosted-engine-setup, the Self-Hosted Engine was added to the default cluster, but the additional 2 hosts were not added. In this release, deployment with ovirt-ansible-hosted-engine-setup successfully adds all hosts to the cluster. (BZ#1855283) Previously, when creating large numbers of virtual machines (~2300 VMs), the associated Data Centers became unresponsive, and the hosts did not have Storage Pool Managers (SPM). With this release, large scale deployment of virtual machines succeeds without errors. (BZ#1849558)

Affected Software

12 affected componentsFixes available
redhat/openvswitch2.11<2.11.0-54.20200327gita4efc59.el7fd
2.11.0-54.20200327gita4efc59.el7fd
redhat/ovirt-ansible-repositories<1.1.6-1.el7e
1.1.6-1.el7e
redhat/ovn2.11<2.11.1-44.el7fd
2.11.1-44.el7fd
redhat/python-ovirt-engine-sdk4<4.3.4-1.el7e
4.3.4-1.el7e
redhat/openvswitch2.11-debuginfo<2.11.0-54.20200327gita4efc59.el7fd
2.11.0-54.20200327gita4efc59.el7fd
redhat/openvswitch2.11-devel<2.11.0-54.20200327gita4efc59.el7fd
2.11.0-54.20200327gita4efc59.el7fd
redhat/ovn2.11-central<2.11.1-44.el7fd
2.11.1-44.el7fd
redhat/ovn2.11-debuginfo<2.11.1-44.el7fd
2.11.1-44.el7fd
redhat/ovn2.11-vtep<2.11.1-44.el7fd
2.11.1-44.el7fd
redhat/python-openvswitch2.11<2.11.0-54.20200327gita4efc59.el7fd
2.11.0-54.20200327gita4efc59.el7fd
redhat/python-ovirt-engine-sdk4-debuginfo<4.3.4-1.el7e
4.3.4-1.el7e
redhat/ovn2.11-host<2.11.1-44.el7fd
2.11.1-44.el7fd

Remediation

Event History

Sep 30, 2020
Advisory Published
via Red Hat·12:00 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of RHSA-2020:4114?

The severity of RHSA-2020:4114 is classified as critical due to potential exploitation risks.

2

How do I fix RHSA-2020:4114?

To fix RHSA-2020:4114, update the affected packages to their recommended versions.

3

Which packages are affected by RHSA-2020:4114?

The affected packages include openvswitch2.11, ovirt-ansible-repositories, and several others listed under Red Hat offerings.

4

What are the implications of not addressing RHSA-2020:4114?

Failing to address RHSA-2020:4114 may expose systems to security vulnerabilities that can be exploited.

5

How can I verify if my system is affected by RHSA-2020:4114?

You can verify your system's vulnerability status by checking the installed versions of the affected packages against the advisory.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203