RHSA-2021:0381: Low: RHV-M(ovirt-engine) 4.4.z security, bug fix, enhancement update [ovirt-4.4.4]
The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities, resource management, live migrations, and virtual infrastructure provisioning.The Manager is a JBoss Application Server application that provides several interfaces through which the virtual environment can be accessed and interacted with, including an Administration Portal, a VM Portal, and a Representational State Transfer (REST) Application Programming Interface (API).Security Fix(es): jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE) (CVE-2020-25649) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): Red Hat Virtualization Manager now requires Ansible 2.9.15. (BZ#1901946)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:0381?
The severity of RHSA-2021:0381 is classified as important, indicating a potential risk that could impact system operations.
How do I fix RHSA-2021:0381?
To fix RHSA-2021:0381, you should update to the latest versions of the affected packages as specified in the advisory.
Which packages are affected by RHSA-2021:0381?
RHSA-2021:0381 affects several packages including ovirt-engine, ovirt-engine-dwh, and ovirt-web-ui, among others.
What is the purpose of the ovirt-engine package mentioned in RHSA-2021:0381?
The ovirt-engine package provides the Red Hat Virtualization Manager for managing and viewing virtual machines.
Is it necessary to restart the system after applying the fixes for RHSA-2021:0381?
It is recommended to restart the system after applying the fixes to ensure that all changes take effect properly.