Red Hat Security Advisory

RHSA-2021:1169

RHV Manager (ovirt-engine) 4.4.z [ovirt-4.4.5] security, bug fix, enhancement

Released 2021-04-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-4.4.5.9-0.1.el8ev, ovirt-engine-backend-4.4.5.9-0.1.el8ev, ovirt-engine-dbscripts-4.4.5.9-0.1.el8ev +18

Fixes 4 records

TI-2020-17273 CVE-2020-28458 · GHSA-m7j4-fhg6-xf5v

Prototype pollution in datatables.net

LOW 38

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.03715 Published 2020-12-16 Partial fix · 1.10.22 CWE-1321

TI-2020-17287 CVE-2020-28477 · GHSA-9qmh-276g-x5pj

Prototype pollution in immer

LOW 37

This affects all versions of package immer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02341 Published 2021-01-19 Partial fix · 8.0.1 CWE-471

TI-2019-15135 CVE-2019-20921 · GHSA-7c82-mp33-r854

bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS).

LOW 31

bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01738 Published 2020-09-30 Partial fix · 1.13.6 CWE-79

TI-2020-15674 CVE-2020-25657 · GHSA-2j9v-8g47-mxh2

A flaw was found in all released versions of m2crypto, where they are vulnerable to…

LOW 30

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01763 Published 2021-01-12 Partial fix CWE-385