Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-backend | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-dbscripts | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-health-check-bundler | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-restapi | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-base | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-cinderlib | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-imageio | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-ovirt-engine | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-ovirt-engine-common | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-vmconsole-proxy-helper | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-setup-plugin-websocket-proxy | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-tools | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-tools-backup | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-ui-extensions | 0:1.3.3-1.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-vmconsole-proxy-helper | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-webadmin-portal | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-engine-websocket-proxy | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | ovirt-web-ui | 0:1.8.1-2.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | python3-ovirt-engine-lib | 0:4.5.0.7-0.9.el8ev |
| Red Hat · Rhev Manager 4 rhev_manager:4.4:el8 | rhvm | 0:4.5.0.7-0.9.el8ev |
Vulnerabilities 6
-
High 7.5
ReDoS in normalize-url
The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.
-
High 7.5
Inefficient Regular Expression Complexity in chalk/ansi-regex
ansi-regex is vulnerable to Inefficient Regular Expression Complexity
-
Medium 6.5
XSS in the `altField` option of the Datepicker widget
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value…
-
Medium 6.5
XSS in `*Text` options of the Datepicker widget
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values pas…
-
Medium 6.5
XSS in the `of` option of the `.position()` util
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value pass…
-
Medium 5.3
Regular Expression Denial of Service (ReDoS)
All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/technical_notes
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=655153
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=977778
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1624015
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1648985
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1667517
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1687845
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1781241
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1782056
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1849169
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1878930
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1922977
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1926625
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1927985
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1944290
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1944834
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1956295
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1959186
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1964208
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1964461
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1971622
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1974741
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1979441
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1979797
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1980192
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1986726
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1986834
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1987121
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1988496
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1990462
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1991240
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1995793
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1996123
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1998255
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1999698
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2000031
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2002283
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2003883