{"id":"RHSA-2021:1169","summary":"Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4.z [ovirt-4.4.5] security, bug fix, enhancement","modified":"2026-03-11T07:18:47.055562Z","published":"2024-09-16T05:20:39Z","upstream":["CVE-2019-20921","CVE-2020-25657","CVE-2020-28458","CVE-2020-28477"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2021:1169"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#moderate"},{"type":"ARTICLE","url":"https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/technical_notes"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1145658"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1155275"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649479"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666786"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688186"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729359"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1787235"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802844"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837221"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1843882"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1858420"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882273"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884233"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889823"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895217"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901503"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901752"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905108"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905158"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1908441"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1910302"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913198"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914602"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918162"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919555"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921104"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921119"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1922200"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924012"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1926854"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927851"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931514"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931786"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1169.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2019-20921"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2019-20921"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20921"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9r7h-6639-v5mw"},{"type":"ARTICLE","url":"https://snyk.io/vuln/SNYK-JS-BOOTSTRAPSELECT-570457"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2020-25657"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2020-25657"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25657"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2020-28458"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2020-28458"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28458"},{"type":"ARTICLE","url":"https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2020-28477"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2020-28477"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28477"},{"type":"ARTICLE","url":"https://snyk.io/vuln/SNYK-JS-IMMER-1019369"}],"affected":[{"package":{"name":"ovirt-web-ui","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-web-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.7-1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-backend","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-backend"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-dbscripts","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-dbscripts"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-health-check-bundler","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-health-check-bundler"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-restapi","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-restapi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-setup","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-setup"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-setup-base","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-setup-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-setup-plugin-cinderlib","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-setup-plugin-cinderlib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-setup-plugin-imageio","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-setup-plugin-imageio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-setup-plugin-ovirt-engine","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-setup-plugin-ovirt-engine"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-setup-plugin-ovirt-engine-common","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-setup-plugin-ovirt-engine-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-setup-plugin-vmconsole-proxy-helper","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-setup-plugin-vmconsole-proxy-helper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-setup-plugin-websocket-proxy","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-setup-plugin-websocket-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-tools","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-tools-backup","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-tools-backup"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-vmconsole-proxy-helper","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-vmconsole-proxy-helper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-webadmin-portal","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-webadmin-portal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"ovirt-engine-websocket-proxy","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/ovirt-engine-websocket-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"python3-ovirt-engine-lib","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/python3-ovirt-engine-lib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}},{"package":{"name":"rhvm","ecosystem":"Red Hat:rhev_manager:4.4:el8","purl":"pkg:rpm/redhat/rhvm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2021:1169.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}