Red Hat Security Advisory: RHV Manager (ovirt-engine) security update [ovirt-4.4.9]

Fixed packages 1

Vulnerabilities 2

• High 7.5
  CVE-2020-7733

  Regular Expression Denial of Service (ReDoS)

  The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

  ua-parser-js node-ua-parser-js Ubuntu npm
  Sep 16, 2020
• Medium 5.3
  CVE-2020-28469

  Regular Expression Denial of Service (ReDoS)

  This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

  js-jquery nodejs-nodemon glob-parent node-glob-parent Debian Azure Linux npm
  Jun 3, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/technical_notes
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1352501
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1879733
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1940991
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1945459
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1957830
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1971802
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1977232
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1977276
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1979730
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1989324
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1992690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2000364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2001551
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2001944
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2004444
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2007550
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014017
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4626.json
• report
  https://access.redhat.com/security/cve/CVE-2020-7733
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-7733
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-7733
• article
  https://snyk.io/vuln/SNYK-JS-UAPARSERJS-610226
• report
  https://access.redhat.com/security/cve/CVE-2020-28469
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-28469
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-28469
• article
  https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905