Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-backend | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-dbscripts | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-health-check-bundler | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-restapi | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-base | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-cinderlib | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-imageio | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-ovirt-engine | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-ovirt-engine-common | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-vmconsole-proxy-helper | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-websocket-proxy | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-tools | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-tools-backup | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-ui-extensions | 0:1.2.3-1.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-vmconsole-proxy-helper | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-webadmin-portal | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-websocket-proxy | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-web-ui | 0:1.6.4-1.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | python3-ovirt-engine-lib | 0:4.4.2.3-0.6.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | rhvm | 0:4.4.2.3-0.6.el8ev |
Vulnerabilities 4
-
Medium 6.9
Potential XSS vulnerability in jQuery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…
KEV Jan 23, 2025 -
High 7.4CVE-2020-8203 Public exploit
Prototype Pollution in lodash
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
-
Medium 6.9
jQuery has a potential XSS vulnerability
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3…
-
Medium 6.3
A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable pa…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1625499
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1638217
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1643520
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1674420
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1748879
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1749803
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1758024
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1763812
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1778471
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1787854
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1801206
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1803856
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1804037
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1804046
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1806339
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816951
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1819260
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1826255
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1828406
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1831949
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1831952
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1831954
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1831956
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1838051
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1841112
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1843234
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1850004
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1854488
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1855377
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1857412
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1858184
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1859460
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1860907
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1866466
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1866734
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1869209
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1869302
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1871235