Red Hat Security Advisory: RHV RHEL Host (ovirt-host) 4.4.z [ovirt-4.4.5] security, bug fix, enhancement

Fixed packages 2

Vulnerabilities 1

• High 7.3
  CVE-2020-28458 Public exploit

  Prototype Pollution

  All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.

  reaper datatables.net Azure Linux npm
  Dec 16, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1755156
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1796415
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1815589
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1836661
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1860492
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1870435
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1901503
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1908441
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1909956
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1916032
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1916519
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1916947
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1917927
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1919246
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1921014
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1921108
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1184.json
• report
  https://access.redhat.com/security/cve/CVE-2020-28458
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-28458
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-28458
• article
  https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402