Skip to content
OpenAdvisories
Critical RHSA-2020:1308 2 CVEs

Red Hat Security Advisory: Red Hat Virtualization Engine security, bug fix 4.3.9

Published Sep 20, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::hypervisor apache-commons-beanutils 0:1.8.3-15.el7_7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor apache-commons-beanutils-javadoc 0:1.8.3-15.el7_7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-backend 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-dbscripts 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-extension-aaa-misc 0:1.0.4-1.el7ev
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-extensions-api-impl 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-extensions-api-impl-javadoc 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-health-check-bundler 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-restapi 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-setup 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-setup-base 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-setup-plugin-cinderlib 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-setup-plugin-ovirt-engine 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-setup-plugin-ovirt-engine-common 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-setup-plugin-vmconsole-proxy-helper 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-setup-plugin-websocket-proxy 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-tools 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-tools-backup 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-vmconsole-proxy-helper 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-webadmin-portal 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-engine-websocket-proxy 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 ovirt-fast-forward-upgrade 0:1.0.0-17.el7ev
Red Hat · Rhev Manager 4 rhev_manager:4.3 python2-ovirt-engine-lib 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 rhvm 0:4.3.9.3-0.1.el7
Red Hat · Rhev Manager 4 rhev_manager:4.3 rhvm-dependencies 0:4.3.2-1.el7ev

Vulnerabilities 2

  • Critical 9.8
    CVE-2019-17195 Public exploit EPSS 11%

    Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT

    Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

    com.nimbusds:nimbus-jose-jwt Maven
  • High 7.3
    CVE-2019-10086 EPSS 29%

    Insecure Deserialization in Apache Commons Beanutils

    In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default chara…

    Apache Apache Commons Beanutils trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1752522
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1764791
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1767483
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1789737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1792874
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1797496
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1801310
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1808038
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1808607
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1809470
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1810527
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1308.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-10086
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10086
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10086
  • article
    https://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt
  • report
    https://access.redhat.com/security/cve/CVE-2019-17195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-17195
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-17195