Red Hat Security Advisory

RHSA-2020:5179

Red Hat Virtualization security, bug fix, and enhancement update

Released 2020-11-24 · Red Hat rating Low · View on Red Hat →

Fixed in

RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-4.4.3.8-0.1.el8ev, ovirt-engine-backend-4.4.3.8-0.1.el8ev, ovirt-engine-dbscripts-4.4.3.8-0.1.el8ev +18

TI-2019-15134 CVE-2019-20920 · GHSA-3cqr-58rm-57f8

MEDIUM 47

Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03154 Published 2020-09-30 Partial fix · 3.0.8, 4.5.3 CWE-94

TI-2020-06621 CVE-2020-8203 · GHSA-p6mc-m468-83gw

MEDIUM 41

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.05213 Published 2020-07-15 Partial fix · 4.17.19, 4.17.20 CWE-770

TI-2019-15136 CVE-2019-20922 · GHSA-62gr-4qp9-h98f

LOW 39

Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03691 Published 2020-09-30 Partial fix · 4.4.5 CWE-400