5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.4%
The Red Hat Virtualization Manager is a centralized management platform
that allows system administrators to view and manage virtual machines. The
Manager provides a comprehensive range of features including search
capabilities, resource management, live migrations, and virtual
infrastructure provisioning.
The Manager is a JBoss Application Server application that provides several
interfaces through which the virtual environment can be accessed and
interacted with, including an Administration Portal, a User Portal, and a
Representational State Transfer (REST) Application Programming Interface
(API).
Security Fix(es):
This issue was discovered by Simone Tiraboschi (Red Hat).
Bug Fix(es):
With this update, users are now warned to set the system in global maintenance mode before running the engine-setup command. This is because data corruption may occur if the engine-setup command is run without setting the system into global maintenance mode. This update means that the user is warned and the setup will be aborted if the system is not in global maintenance mode and the engine is running in the hosted engine configuration. (BZ#1359844)
Previously, the update of the compatibility version of a cluster with many running virtual machines that are installed with the guest-agent caused a deadlock that caused the update to fail. In some cases, these clusters could not be upgraded to a newer compatibility version. Now, the deadlock in the database has been prevented so that a cluster with many running virtual machines that are installed with the guest-agent can be upgraded to newer compatibility version. (BZ#1369415)
Previously, a virtual machine with a null CPU profile id stored in the database caused a NPE when editing the virtual machine. Now, a virtual machine with a null CPU profile id stored in the database is correctly handled and the virtual machine can be edited. (BZ#1373090)
Setting only one of the thresholds for power saving/evenly distributed memory based balancing (high or low) can lead to unexpected results. For example, when in power saving load balancing the threshold for memory over utilized hosts was set with a value, and the threshold for memory under utilized hosts was undefined thus getting a default value of 0. All hosts were considered as under utilized hosts and were chosen as sources for migration, but no host was chosen as a destination for migration.
This has now been changed so that when the threshold for memory under utilized host is undefined, it gets a default value of Long.MAX. Now, when the threshold for memory over utilized hosts is set with a value, and the threshold for memory under utilized host is undefined, only over utilized hosts will be selected as sources for migration, and destination hosts will be hosts that are not over utilized. (BZ#1359767)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 6 | noarch | rhevm-webadmin-portal-debuginfo | < 3.6.9.2-0.1.el6 | rhevm-webadmin-portal-debuginfo-3.6.9.2-0.1.el6.noarch.rpm |
RedHat | 6 | noarch | rhevm-setup-base | < 3.6.9.2-0.1.el6 | rhevm-setup-base-3.6.9.2-0.1.el6.noarch.rpm |
RedHat | 6 | noarch | rhevm | < 3.6.9.2-0.1.el6 | rhevm-3.6.9.2-0.1.el6.noarch.rpm |
RedHat | 6 | noarch | rhevm-backend | < 3.6.9.2-0.1.el6 | rhevm-backend-3.6.9.2-0.1.el6.noarch.rpm |
RedHat | 6 | noarch | rhevm-extensions-api-impl | < 3.6.9.2-0.1.el6 | rhevm-extensions-api-impl-3.6.9.2-0.1.el6.noarch.rpm |
RedHat | 6 | noarch | rhevm-dbscripts | < 3.6.9.2-0.1.el6 | rhevm-dbscripts-3.6.9.2-0.1.el6.noarch.rpm |
RedHat | 6 | noarch | rhevm-vmconsole-proxy-helper | < 3.6.9.2-0.1.el6 | rhevm-vmconsole-proxy-helper-3.6.9.2-0.1.el6.noarch.rpm |
RedHat | 6 | noarch | rhevm-tools-backup | < 3.6.9.2-0.1.el6 | rhevm-tools-backup-3.6.9.2-0.1.el6.noarch.rpm |
RedHat | 6 | noarch | rhevm-userportal | < 3.6.9.2-0.1.el6 | rhevm-userportal-3.6.9.2-0.1.el6.noarch.rpm |
RedHat | 6 | noarch | rhevm-websocket-proxy | < 3.6.9.2-0.1.el6 | rhevm-websocket-proxy-3.6.9.2-0.1.el6.noarch.rpm |
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.4%