RHSA-2022:4711: Moderate: RHV Manager (ovirt-engine) [ovirt-4.5.0] security update
First published: Thu May 26 2022(Updated: )
The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities, resource management, live migrations, and virtual infrastructure provisioning.<br>Security Fix(es):<br><li> nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes (CVE-2021-3807)</li> <li> nodejs-trim-off-newlines: ReDoS via string processing (CVE-2021-23425)</li> <li> normalize-url: ReDoS for data URLs (CVE-2021-33502)</li> <li> jquery-ui: XSS in the altField option of the datepicker widget (CVE-2021-41182)</li> <li> jquery-ui: XSS in *Text options of the datepicker widget (CVE-2021-41183)</li> <li> jquery-ui: XSS in the 'of' option of the .position() util (CVE-2021-41184)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>A list of bugs fixed in this update is available in the Technical Notes book:<br><a href="https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/technical_notes" target="_blank">https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/technical_notes</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/ansible-runner | <2.1.3-1.el8e | 2.1.3-1.el8e |
| redhat/apache-sshd | <2.8.0-0.1.el8e | 2.8.0-0.1.el8e |
| redhat/engine-db-query | <1.6.4-1.el8e | 1.6.4-1.el8e |
| redhat/ovirt-dependencies | <4.5.1-1.el8e | 4.5.1-1.el8e |
| redhat/ovirt-engine | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-dwh | <4.5.2-1.el8e | 4.5.2-1.el8e |
| redhat/ovirt-engine-metrics | <1.6.0-1.el8e | 1.6.0-1.el8e |
| redhat/ovirt-engine-ui-extensions | <1.3.3-1.el8e | 1.3.3-1.el8e |
| redhat/ovirt-log-collector | <4.4.5-1.el8e | 4.4.5-1.el8e |
| redhat/ovirt-web-ui | <1.8.1-2.el8e | 1.8.1-2.el8e |
| redhat/rhv-log-collector-analyzer | <1.0.13-1.el8e | 1.0.13-1.el8e |
| redhat/rhvm-branding-rhv | <4.4.11-1.el8e | 4.4.11-1.el8e |
| redhat/rhvm-setup-plugins | <4.5.0-2.el8e | 4.5.0-2.el8e |
| redhat/vdsm-jsonrpc-java | <1.7.1-2.el8e | 1.7.1-2.el8e |
| redhat/apache-sshd-javadoc | <2.8.0-0.1.el8e | 2.8.0-0.1.el8e |
| redhat/ovirt-engine-backend | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-dbscripts | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-dwh-grafana-integration-setup | <4.5.2-1.el8e | 4.5.2-1.el8e |
| redhat/ovirt-engine-dwh-setup | <4.5.2-1.el8e | 4.5.2-1.el8e |
| redhat/ovirt-engine-health-check-bundler | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-restapi | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-setup | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-setup-base | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-setup-plugin-cinderlib | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-setup-plugin-imageio | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-setup-plugin-ovirt-engine | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-setup-plugin-ovirt-engine-common | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-setup-plugin-vmconsole-proxy-helper | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-setup-plugin-websocket-proxy | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-tools | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-tools-backup | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-vmconsole-proxy-helper | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-webadmin-portal | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/ovirt-engine-websocket-proxy | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/python3-ovirt-engine-lib | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/python38-ansible-runner | <2.1.3-1.el8e | 2.1.3-1.el8e |
| redhat/python38-docutils | <0.14-12.4.el8e | 0.14-12.4.el8e |
| redhat/rhvm | <4.5.0.7-0.9.el8e | 4.5.0.7-0.9.el8e |
| redhat/vdsm-jsonrpc-java-javadoc | <1.7.1-2.el8e | 1.7.1-2.el8e |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=655153
- https://bugzilla.redhat.com/show_bug.cgi?id=977778
- https://bugzilla.redhat.com/show_bug.cgi?id=1624015
- https://bugzilla.redhat.com/show_bug.cgi?id=1648985
- https://bugzilla.redhat.com/show_bug.cgi?id=1667517
- https://bugzilla.redhat.com/show_bug.cgi?id=1687845
- https://bugzilla.redhat.com/show_bug.cgi?id=1781241
- https://bugzilla.redhat.com/show_bug.cgi?id=1782056
- https://bugzilla.redhat.com/show_bug.cgi?id=1849169
- https://bugzilla.redhat.com/show_bug.cgi?id=1878930
- https://bugzilla.redhat.com/show_bug.cgi?id=1922977
- https://bugzilla.redhat.com/show_bug.cgi?id=1926625
- https://bugzilla.redhat.com/show_bug.cgi?id=1927985
- https://bugzilla.redhat.com/show_bug.cgi?id=1944290
- https://bugzilla.redhat.com/show_bug.cgi?id=1944834
- https://bugzilla.redhat.com/show_bug.cgi?id=1956295
- https://bugzilla.redhat.com/show_bug.cgi?id=1959186
- https://bugzilla.redhat.com/show_bug.cgi?id=1964208
- https://bugzilla.redhat.com/show_bug.cgi?id=1964461
- https://bugzilla.redhat.com/show_bug.cgi?id=1971622
- https://bugzilla.redhat.com/show_bug.cgi?id=1974741
- https://bugzilla.redhat.com/show_bug.cgi?id=1979441
- https://bugzilla.redhat.com/show_bug.cgi?id=1979797
- https://bugzilla.redhat.com/show_bug.cgi?id=1980192
- https://bugzilla.redhat.com/show_bug.cgi?id=1986726
- https://bugzilla.redhat.com/show_bug.cgi?id=1986834
- https://bugzilla.redhat.com/show_bug.cgi?id=1987121
- https://bugzilla.redhat.com/show_bug.cgi?id=1988496
- https://bugzilla.redhat.com/show_bug.cgi?id=1990462
- https://bugzilla.redhat.com/show_bug.cgi?id=1991240
- https://bugzilla.redhat.com/show_bug.cgi?id=1995793
- https://bugzilla.redhat.com/show_bug.cgi?id=1996123
- https://bugzilla.redhat.com/show_bug.cgi?id=1998255
- https://bugzilla.redhat.com/show_bug.cgi?id=1999698
- https://bugzilla.redhat.com/show_bug.cgi?id=2000031
- https://bugzilla.redhat.com/show_bug.cgi?id=2002283
- https://bugzilla.redhat.com/show_bug.cgi?id=2003883
- https://bugzilla.redhat.com/show_bug.cgi?id=2003996
- https://bugzilla.redhat.com/show_bug.cgi?id=2006602
- https://bugzilla.redhat.com/show_bug.cgi?id=2006745
- https://bugzilla.redhat.com/show_bug.cgi?id=2007384
- https://bugzilla.redhat.com/show_bug.cgi?id=2007557
- https://bugzilla.redhat.com/show_bug.cgi?id=2008798
- https://bugzilla.redhat.com/show_bug.cgi?id=2010203
- https://bugzilla.redhat.com/show_bug.cgi?id=2010903
- https://bugzilla.redhat.com/show_bug.cgi?id=2013928
- https://bugzilla.redhat.com/show_bug.cgi?id=2014888
- https://bugzilla.redhat.com/show_bug.cgi?id=2015796
- https://bugzilla.redhat.com/show_bug.cgi?id=2019144
- https://bugzilla.redhat.com/show_bug.cgi?id=2019148
- https://bugzilla.redhat.com/show_bug.cgi?id=2019153
- https://bugzilla.redhat.com/show_bug.cgi?id=2021217
- https://bugzilla.redhat.com/show_bug.cgi?id=2023250
- https://bugzilla.redhat.com/show_bug.cgi?id=2023786
- https://bugzilla.redhat.com/show_bug.cgi?id=2024202
- https://bugzilla.redhat.com/show_bug.cgi?id=2025936
- https://bugzilla.redhat.com/show_bug.cgi?id=2030596
- https://bugzilla.redhat.com/show_bug.cgi?id=2030663
- https://bugzilla.redhat.com/show_bug.cgi?id=2031027
- https://bugzilla.redhat.com/show_bug.cgi?id=2035051
- https://bugzilla.redhat.com/show_bug.cgi?id=2037115
- https://bugzilla.redhat.com/show_bug.cgi?id=2037121
- https://bugzilla.redhat.com/show_bug.cgi?id=2040361
- https://bugzilla.redhat.com/show_bug.cgi?id=2040402
- https://bugzilla.redhat.com/show_bug.cgi?id=2040474
- https://bugzilla.redhat.com/show_bug.cgi?id=2041544
- https://bugzilla.redhat.com/show_bug.cgi?id=2043146
- https://bugzilla.redhat.com/show_bug.cgi?id=2044273
- https://bugzilla.redhat.com/show_bug.cgi?id=2048546
- https://bugzilla.redhat.com/show_bug.cgi?id=2050566
- https://bugzilla.redhat.com/show_bug.cgi?id=2050614
- https://bugzilla.redhat.com/show_bug.cgi?id=2051857
- https://bugzilla.redhat.com/show_bug.cgi?id=2052557
- https://bugzilla.redhat.com/show_bug.cgi?id=2052690
- https://bugzilla.redhat.com/show_bug.cgi?id=2054756
- https://bugzilla.redhat.com/show_bug.cgi?id=2055136
- https://bugzilla.redhat.com/show_bug.cgi?id=2056021
- https://bugzilla.redhat.com/show_bug.cgi?id=2056052
- https://bugzilla.redhat.com/show_bug.cgi?id=2056126
- https://bugzilla.redhat.com/show_bug.cgi?id=2058264
- https://bugzilla.redhat.com/show_bug.cgi?id=2059521
- https://bugzilla.redhat.com/show_bug.cgi?id=2059877
- https://bugzilla.redhat.com/show_bug.cgi?id=2061904
- https://bugzilla.redhat.com/show_bug.cgi?id=2065052
- https://bugzilla.redhat.com/show_bug.cgi?id=2066084
- https://bugzilla.redhat.com/show_bug.cgi?id=2066283
- https://bugzilla.redhat.com/show_bug.cgi?id=2069972
- https://bugzilla.redhat.com/show_bug.cgi?id=2070156
- https://bugzilla.redhat.com/show_bug.cgi?id=2071468
- https://bugzilla.redhat.com/show_bug.cgi?id=2072637
- https://bugzilla.redhat.com/show_bug.cgi?id=2072639
- https://bugzilla.redhat.com/show_bug.cgi?id=2072641
- https://bugzilla.redhat.com/show_bug.cgi?id=2072642
- https://bugzilla.redhat.com/show_bug.cgi?id=2072645
- https://bugzilla.redhat.com/show_bug.cgi?id=2072646
- https://bugzilla.redhat.com/show_bug.cgi?id=2075352
- https://access.redhat.com/security/updates/classification/#moderate
- https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/technical_notes
- https://access.redhat.com/errata/RHSA-2022:4711 (Advisory)
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2022:4711
- agent/software-canonical-lookup
- package-manager/redhat