Red Hat Security Advisory

RHSA-2021:0381

RHV-M(ovirt-engine) 4.4.z security, bug fix, enhancement update [ovirt-4.4.4]

Released 2021-02-02 · Red Hat rating Low · View on Red Hat →

Fixed in

RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-4.4.4.5-0.10.el8ev, ovirt-engine-backend-4.4.4.5-0.10.el8ev, ovirt-engine-dbscripts-4.4.4.5-0.10.el8ev +23

TI-2020-15666 CVE-2020-25649 · GHSA-288c-cq4h-88gq

MEDIUM 56

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.17714 Published 2020-12-03 Partial fix · 2.6.7.4, 2.9.10.7 +1 CWE-611