Red Hat Security Advisory

RHSA-2021:3459

Red Hat Virtualization Host security and bug fix update [ovirt-4.4.8]

Released 2021-09-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts cockpit-ovirt-0.15.1-2.el8ev, cockpit-ovirt-dashboard-0.15.1-2.el8ev

TI-2021-06035 CVE-2021-23337 · GHSA-35jh-r3h4-6jhm

MEDIUM 59

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.21333 Published 2021-02-15 Partial fix · 4.17.21 CWE-94

TI-2020-17303 CVE-2020-28500 · GHSA-29mw-wpgm-hmr9

MEDIUM 40

Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07336 Published 2021-02-15 Partial fix · 4.17.21 CWE-1333