Red Hat Security Advisory: RHV Manager security update (ovirt-engine) [ovirt-4.4.6]

Fixed packages 2

Vulnerabilities 2

• High 7.2
  CVE-2021-23337 Public exploit Scanner template EPSS 20%

  Command Injection

  Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

  js-jquery lodash node-lodash node-lodash Debian Ubuntu Azure Linux npm RubyGems
  Feb 15, 2021
• Medium 5.3
  CVE-2020-28500

  Regular Expression Denial of Service (ReDoS)

  Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

  js-jquery lodash node-lodash node-lodash Debian Ubuntu Azure Linux npm RubyGems
  Feb 15, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/technical_notes
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1113630
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1310330
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1589763
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1621421
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1717411
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1766414
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1775145
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1821199
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1845877
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1875363
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1906074
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1910858
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1917718
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1919195
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1919984
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1924610
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1926018
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1926823
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1928158
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1928188
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1928937
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1928954
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1929211
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930522
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930565
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930895
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1932284
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1935073
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1942083
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1943267
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1944723
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1948577
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1949543
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1949547
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1950348
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1950466
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1954401