RHSA-2021:2519: Important: RHV-H security update (redhat-virtualization-host) 4.3.16

The redhat-virtualization-host packages provide the Red Hat Virtualization Host.<br>These packages include redhat-release-virtualization-host. Red Hat<br>Virtualization Hosts (RHVH) are installed using a special build of Red Hat<br>Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and<br>performing administrative tasks.<br>Security Fix(es):<br><li> glib: integer overflow in gbytesnew function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits (CVE-2021-27219)</li> <li> hw: vt-d related privilege escalation (CVE-2020-24489)</li> <li> dhcp: stack-based buffer overflow when parsing statements with colon-separated hex digits in config or lease files in dhcpd and dhclient (CVE-2021-25217)</li> For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.