RHSA-2020:3807
- Source
- https://access.redhat.com/errata/RHSA-2020:3807
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2020:3807.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2020:3807
- Related
- Published
- 2024-09-18T04:27:00Z
- Modified
- 2024-11-24T20:21:21Z
- Severity
-
- 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2020:3807
- https://access.redhat.com/security/updates/classification/#moderate
- https://bugzilla.redhat.com/show_bug.cgi?id=1625499
- https://bugzilla.redhat.com/show_bug.cgi?id=1638217
- https://bugzilla.redhat.com/show_bug.cgi?id=1643520
- https://bugzilla.redhat.com/show_bug.cgi?id=1674420
- https://bugzilla.redhat.com/show_bug.cgi?id=1748879
- https://bugzilla.redhat.com/show_bug.cgi?id=1749803
- https://bugzilla.redhat.com/show_bug.cgi?id=1758024
- https://bugzilla.redhat.com/show_bug.cgi?id=1763812
- https://bugzilla.redhat.com/show_bug.cgi?id=1778471
- https://bugzilla.redhat.com/show_bug.cgi?id=1787854
- https://bugzilla.redhat.com/show_bug.cgi?id=1801206
- https://bugzilla.redhat.com/show_bug.cgi?id=1803856
- https://bugzilla.redhat.com/show_bug.cgi?id=1804037
- https://bugzilla.redhat.com/show_bug.cgi?id=1804046
- https://bugzilla.redhat.com/show_bug.cgi?id=1806339
- https://bugzilla.redhat.com/show_bug.cgi?id=1816951
- https://bugzilla.redhat.com/show_bug.cgi?id=1819260
- https://bugzilla.redhat.com/show_bug.cgi?id=1826255
- https://bugzilla.redhat.com/show_bug.cgi?id=1828406
- https://bugzilla.redhat.com/show_bug.cgi?id=1831949
- https://bugzilla.redhat.com/show_bug.cgi?id=1831952
- https://bugzilla.redhat.com/show_bug.cgi?id=1831954
- https://bugzilla.redhat.com/show_bug.cgi?id=1831956
- https://bugzilla.redhat.com/show_bug.cgi?id=1838051
- https://bugzilla.redhat.com/show_bug.cgi?id=1841112
- https://bugzilla.redhat.com/show_bug.cgi?id=1843234
- https://bugzilla.redhat.com/show_bug.cgi?id=1850004
- https://bugzilla.redhat.com/show_bug.cgi?id=1854488
- https://bugzilla.redhat.com/show_bug.cgi?id=1855377
- https://bugzilla.redhat.com/show_bug.cgi?id=1857412
- https://bugzilla.redhat.com/show_bug.cgi?id=1858184
- https://bugzilla.redhat.com/show_bug.cgi?id=1859460
- https://bugzilla.redhat.com/show_bug.cgi?id=1860907
- https://bugzilla.redhat.com/show_bug.cgi?id=1866466
- https://bugzilla.redhat.com/show_bug.cgi?id=1866734
- https://bugzilla.redhat.com/show_bug.cgi?id=1869209
- https://bugzilla.redhat.com/show_bug.cgi?id=1869302
- https://bugzilla.redhat.com/show_bug.cgi?id=1871235
- https://bugzilla.redhat.com/show_bug.cgi?id=1875609
- https://bugzilla.redhat.com/show_bug.cgi?id=1875851
- https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3807.json
- https://access.redhat.com/security/cve/CVE-2020-8203
- https://www.cve.org/CVERecord?id=CVE-2020-8203
- https://nvd.nist.gov/vuln/detail/CVE-2020-8203
- https://hackerone.com/reports/712065
- https://www.npmjs.com/advisories/1523
- https://access.redhat.com/security/cve/CVE-2020-11022
- https://www.cve.org/CVERecord?id=CVE-2020-11022
- https://nvd.nist.gov/vuln/detail/CVE-2020-11022
- https://github.com/advisories/GHSA-gxr4-xjj5-5px2
- https://access.redhat.com/security/cve/CVE-2020-11023
- https://www.cve.org/CVERecord?id=CVE-2020-11023
- https://nvd.nist.gov/vuln/detail/CVE-2020-11023
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
- https://access.redhat.com/security/cve/CVE-2020-14333
- https://www.cve.org/CVERecord?id=CVE-2020-14333
- https://nvd.nist.gov/vuln/detail/CVE-2020-14333
Affected packages
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-ui-extensions
Package
- Name
- ovirt-engine-ui-extensions
- Purl
- pkg:rpm/redhat/ovirt-engine-ui-extensions
Red Hat:rhev_manager:4.4:el8 / ovirt-web-ui
Package
- Name
- ovirt-web-ui
- Purl
- pkg:rpm/redhat/ovirt-web-ui
Red Hat:rhev_manager:4.4:el8 / ovirt-engine
Package
- Name
- ovirt-engine
- Purl
- pkg:rpm/redhat/ovirt-engine
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-backend
Package
- Name
- ovirt-engine-backend
- Purl
- pkg:rpm/redhat/ovirt-engine-backend
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-dbscripts
Package
- Name
- ovirt-engine-dbscripts
- Purl
- pkg:rpm/redhat/ovirt-engine-dbscripts
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-health-check-bundler
Package
- Name
- ovirt-engine-health-check-bundler
- Purl
- pkg:rpm/redhat/ovirt-engine-health-check-bundler
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-restapi
Package
- Name
- ovirt-engine-restapi
- Purl
- pkg:rpm/redhat/ovirt-engine-restapi
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-setup
Package
- Name
- ovirt-engine-setup
- Purl
- pkg:rpm/redhat/ovirt-engine-setup
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-setup-base
Package
- Name
- ovirt-engine-setup-base
- Purl
- pkg:rpm/redhat/ovirt-engine-setup-base
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-setup-plugin-cinderlib
Package
- Name
- ovirt-engine-setup-plugin-cinderlib
- Purl
- pkg:rpm/redhat/ovirt-engine-setup-plugin-cinderlib
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-setup-plugin-imageio
Package
- Name
- ovirt-engine-setup-plugin-imageio
- Purl
- pkg:rpm/redhat/ovirt-engine-setup-plugin-imageio
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-setup-plugin-ovirt-engine
Package
- Name
- ovirt-engine-setup-plugin-ovirt-engine
- Purl
- pkg:rpm/redhat/ovirt-engine-setup-plugin-ovirt-engine
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-setup-plugin-ovirt-engine-common
Package
- Name
- ovirt-engine-setup-plugin-ovirt-engine-common
- Purl
- pkg:rpm/redhat/ovirt-engine-setup-plugin-ovirt-engine-common
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-setup-plugin-vmconsole-proxy-helper
Package
- Name
- ovirt-engine-setup-plugin-vmconsole-proxy-helper
- Purl
- pkg:rpm/redhat/ovirt-engine-setup-plugin-vmconsole-proxy-helper
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-setup-plugin-websocket-proxy
Package
- Name
- ovirt-engine-setup-plugin-websocket-proxy
- Purl
- pkg:rpm/redhat/ovirt-engine-setup-plugin-websocket-proxy
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-tools
Package
- Name
- ovirt-engine-tools
- Purl
- pkg:rpm/redhat/ovirt-engine-tools
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-tools-backup
Package
- Name
- ovirt-engine-tools-backup
- Purl
- pkg:rpm/redhat/ovirt-engine-tools-backup
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-vmconsole-proxy-helper
Package
- Name
- ovirt-engine-vmconsole-proxy-helper
- Purl
- pkg:rpm/redhat/ovirt-engine-vmconsole-proxy-helper
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-webadmin-portal
Package
- Name
- ovirt-engine-webadmin-portal
- Purl
- pkg:rpm/redhat/ovirt-engine-webadmin-portal
Red Hat:rhev_manager:4.4:el8 / ovirt-engine-websocket-proxy
Package
- Name
- ovirt-engine-websocket-proxy
- Purl
- pkg:rpm/redhat/ovirt-engine-websocket-proxy
Red Hat:rhev_manager:4.4:el8 / python3-ovirt-engine-lib
Package
- Name
- python3-ovirt-engine-lib
- Purl
- pkg:rpm/redhat/python3-ovirt-engine-lib