RHBA-2019:0802 - Bug Fix Advisory

Topic

An update is now available for Red Hat Virtualization Manager.

Description

The Red Hat Virtualization Manager is a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities, resource management, live migrations, and virtual infrastructure provisioning.

The Manager is a JBoss Application Server application that provides several interfaces for accessing and interacting with the virtual environment, including an Administration Portal, a VM Portal, and a Representational State Transfer (REST) Application Programming Interface (API).

Changes to the ovirt-engine component:

• In this release, redirection device types are no longer set to unplugged and can now obtain the proper address from the domain XML when supported or from the host when they are not supported. (BZ#1693322)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/2974891

Affected Products

• Red Hat Virtualization Manager 4.2 x86_64

Fixes

• BZ - 1692380 - [downstream clone - 4.2.8] CVE-2019-3879 ovirt-engine: Missing permissions check in web ui allows a user with basic privileges to delete disks [rhev-m-4.2.z]
• BZ - 1693322 - [downstream clone - 4.2.8-4] usb forwarding does not work on VMs/templates created in 3.6 after upgrading to 4.2.7
• BZ - 1697255 - [downstream clone - 4.2.8] Extend length of value columns in vdc_options table
• BZ - 1699044 - [engine] Rebase bug - for the 4.2.8-4 release

CVEs

• CVE-2019-3879

References

(none)