RHBA-2020:2396: Red Hat Virtualization Engine security, bug fix 4.3.10
The ovirt-engine package provides the Red Hat Virtualization Manager, acentralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities, resource management, live migrations, and virtual infrastructure provisioning.The Manager is a JBoss Application Server application that provides several interfaces through which the virtual environment can be accessed and interacted with, including an Administration Portal, a VM Portal, and a Representational State Transfer (REST) Application Programming Interface (API).PostgreSQL is an open-source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. Changes to the ovirt-engine component: Previously, a new DB was introduced as part of the cinderlib (managed block storage) support, but did not include a backup and restore option. The current release fixes this issue by providing a backup and restore option. (BZ#1820642) Previously, the landing page for the RHV Manager did not support scrolling. As a result, with specific resolutions or zoom ratios, some areas of the landing page were not visible, including the link to the Administration Portal. The current release fixes this issue by enabling users to scroll the landing page and access any of the links on it. (BZ#1796136) Previously, using the Administration Portal to import a storage domain omitted custom mount options for NFS storage servers. The current release fixes this issue by including the custom mount options. (BZ#1828067) Changes to the Documentation component: The current release adds support for installing Red Hat OpenShift Container Platform (RHOCP) version 4.4 on Red Hat Virtualization (RHV). The installer that deploys RHOCP on RHV automates the process using “installer-provisioned infrastructure.” This installer is available for Linux and macOS only. The resulting RHOCP cluster runs the master and worker nodes on virtual machines in RHV. (BZ#1764779)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHBA-2020:2396?
The severity of RHBA-2020:2396 is classified as important.
How do I fix RHBA-2020:2396?
To fix RHBA-2020:2396, you should update the affected packages to version 4.3.10.3-0.2.el7.
What packages are affected by RHBA-2020:2396?
The affected packages include ovirt-engine, ovirt-engine-backend, and various associated plugins and scripts in version 4.3.10.3-0.2.el7.
What is the impact of not addressing RHBA-2020:2396?
Not addressing RHBA-2020:2396 may expose your system to security vulnerabilities and potential exploitation.
Is there a workaround for RHBA-2020:2396?
There are no specific workarounds for RHBA-2020:2396, the recommended action is to apply the relevant updates.