Skip to content
OpenAdvisories
High RHSA-2020:5179 3 CVEs

Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update

Published Sep 14, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-backend 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-dbscripts 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-health-check-bundler 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-restapi 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-setup 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-setup-base 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-setup-plugin-cinderlib 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-setup-plugin-imageio 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-setup-plugin-ovirt-engine 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-setup-plugin-ovirt-engine-common 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-setup-plugin-vmconsole-proxy-helper 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-setup-plugin-websocket-proxy 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-tools 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-tools-backup 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-vmconsole-proxy-helper 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-webadmin-portal 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-engine-websocket-proxy 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 ovirt-web-ui 0:1.6.5-1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 python3-ovirt-engine-lib 0:4.4.3.8-0.1.el8ev
Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 rhvm 0:4.4.3.8-0.1.el8ev

Vulnerabilities 3

  • High 8.1
    CVE-2019-20920

    Arbitrary Code Execution in Handlebars

    Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript. This can be used to run arbitrary code on…

    handlebars node-handlebars node-handlebars Debian Ubuntu npm
  • High 7.5
    CVE-2019-20922

    Regular Expression Denial of Service in Handlebars

    Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow attackers to exhaust system resources.

    handlebars node-handlebars Ubuntu npm
  • High 7.4
    CVE-2020-8203 Public exploit

    Prototype Pollution in lodash

    Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

    js-jquery lodash node-lodash node-lodash Debian Ubuntu Azure Linux npm RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1613514
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1657294
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1691253
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1702016
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1752751
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1760170
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1797717
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1808320
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1811466
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1812316
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1822372
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1825020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1828241
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1829691
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1842344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1845432
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1851865
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1854888
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1855305
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1856671
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1857412
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1859314
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1862101
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1866981
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1870133
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1871694
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1872911
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1873136
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1876923
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1877632
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1877679
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1879199
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1879280
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1879377
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1881634
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1882256
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1882260
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1883844