First published: Wed Dec 08 2021(Updated: )
The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks.<br>Security Fix(es):<br><li> nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS) (CVE-2021-43527)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/redhat-release-virtualization-host | <4.4.9-3.el8e | 4.4.9-3.el8e |
redhat/redhat-release-virtualization-host-content | <4.4.9-3.el8e | 4.4.9-3.el8e |
redhat/redhat-virtualization-host-image-update-placeholder | <4.4.9-3.el8e | 4.4.9-3.el8e |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2021:5006 is classified as critical.
To fix RHSA-2021:5006, update the redhat-release-virtualization-host packages to version 4.4.9-3.el8e.
The affected packages in RHSA-2021:5006 include redhat-release-virtualization-host, redhat-release-virtualization-host-content, and redhat-virtualization-host-image-update-placeholder.
Yes, RHSA-2021:5006 pertains to vulnerabilities affecting Red Hat Virtualization Hosts.
If you cannot update to version 4.4.9-3.el8e for RHSA-2021:5006, reach out to Red Hat support for guidance on alternative solutions.