Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update

{
  "id": "085140fff47a61d99d0ffe0ae75b745dae03ad83d61007149c48c6cb062cbd92",
  "url": "https://osv.dev/vulnerability/RHSA-2020%3A3247",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update",
    "summary": "Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update",
    "evidence": "osv:RHSA-2020:3247",
    "products": [
      {
        "name": {
          "value": "novnc",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:1.1.0-1.el8ost",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-api-explorer",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:0.0.6-1.el8ev",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-backend",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/3/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-dbscripts",
          "evidence": "/affected/4/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/4/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-health-check-bundler",
          "evidence": "/affected/5/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/5/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-restapi",
          "evidence": "/affected/6/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/6/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-setup",
          "evidence": "/affected/7/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/7/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-setup-base",
          "evidence": "/affected/8/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/8/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-setup-plugin-cinderlib",
          "evidence": "/affected/9/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/9/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-setup-plugin-imageio",
          "evidence": "/affected/10/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/10/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-setup-plugin-ovirt-engine",
          "evidence": "/affected/11/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/11/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-setup-plugin-ovirt-engine-common",
          "evidence": "/affected/12/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/12/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-setup-plugin-vmconsole-proxy-helper",
          "evidence": "/affected/13/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/13/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-setup-plugin-websocket-proxy",
          "evidence": "/affected/14/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/14/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-tools",
          "evidence": "/affected/15/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/15/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-tools-backup",
          "evidence": "/affected/16/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/16/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-vmconsole-proxy-helper",
          "evidence": "/affected/17/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/17/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-webadmin-portal",
          "evidence": "/affected/18/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/18/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-websocket-proxy",
          "evidence": "/affected/19/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/19/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "python3-ovirt-engine-lib",
          "evidence": "/affected/20/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/20/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "rhvm",
          "evidence": "/affected/21/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.1.8-0.7.el8ev",
            "evidence": "/affected/21/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "rhvm-dependencies",
          "evidence": "/affected/22/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:4.4.0-1.el8ev",
            "evidence": "/affected/22/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "ovirt-engine-ui-extensions",
          "evidence": "/affected/23/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:1.2.2-1.el8ev",
            "evidence": "/affected/23/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "RHSA-2020:3247",
      "aliases": [
        "RHSA-2020:3247"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:1.1.0-1.el8ost"
                }
              ]
            }
          ],
          "package": {
            "name": "novnc",
            "purl": "pkg:rpm/redhat/novnc",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine",
            "purl": "pkg:rpm/redhat/ovirt-engine",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:0.0.6-1.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-api-explorer",
            "purl": "pkg:rpm/redhat/ovirt-engine-api-explorer",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-backend",
            "purl": "pkg:rpm/redhat/ovirt-engine-backend",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-dbscripts",
            "purl": "pkg:rpm/redhat/ovirt-engine-dbscripts",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-health-check-bundler",
            "purl": "pkg:rpm/redhat/ovirt-engine-health-check-bundler",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-restapi",
            "purl": "pkg:rpm/redhat/ovirt-engine-restapi",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-setup",
            "purl": "pkg:rpm/redhat/ovirt-engine-setup",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-setup-base",
            "purl": "pkg:rpm/redhat/ovirt-engine-setup-base",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-setup-plugin-cinderlib",
            "purl": "pkg:rpm/redhat/ovirt-engine-setup-plugin-cinderlib",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-setup-plugin-imageio",
            "purl": "pkg:rpm/redhat/ovirt-engine-setup-plugin-imageio",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-setup-plugin-ovirt-engine",
            "purl": "pkg:rpm/redhat/ovirt-engine-setup-plugin-ovirt-engine",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-setup-plugin-ovirt-engine-common",
            "purl": "pkg:rpm/redhat/ovirt-engine-setup-plugin-ovirt-engine-common",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-setup-plugin-vmconsole-proxy-helper",
            "purl": "pkg:rpm/redhat/ovirt-engine-setup-plugin-vmconsole-proxy-helper",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-setup-plugin-websocket-proxy",
            "purl": "pkg:rpm/redhat/ovirt-engine-setup-plugin-websocket-proxy",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-tools",
            "purl": "pkg:rpm/redhat/ovirt-engine-tools",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-tools-backup",
            "purl": "pkg:rpm/redhat/ovirt-engine-tools-backup",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-vmconsole-proxy-helper",
            "purl": "pkg:rpm/redhat/ovirt-engine-vmconsole-proxy-helper",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-webadmin-portal",
            "purl": "pkg:rpm/redhat/ovirt-engine-webadmin-portal",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-websocket-proxy",
            "purl": "pkg:rpm/redhat/ovirt-engine-websocket-proxy",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "python3-ovirt-engine-lib",
            "purl": "pkg:rpm/redhat/python3-ovirt-engine-lib",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.1.8-0.7.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "rhvm",
            "purl": "pkg:rpm/redhat/rhvm",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:4.4.0-1.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "rhvm-dependencies",
            "purl": "pkg:rpm/redhat/rhvm-dependencies",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:1.2.2-1.el8ev"
                }
              ]
            }
          ],
          "package": {
            "name": "ovirt-engine-ui-extensions",
            "purl": "pkg:rpm/redhat/ovirt-engine-ui-extensions",
            "ecosystem": "Red Hat:rhev_manager:4.4:el8"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2020:3247.json"
          }
        }
      ],
      "modified": "2026-10-09T10:01:51Z",
      "provider": "osv",
      "upstream": [
        "CVE-2017-18635",
        "CVE-2019-13990",
        "CVE-2019-19336",
        "CVE-2019-8331",
        "CVE-2020-10775",
        "CVE-2020-11022",
        "CVE-2020-11023",
        "CVE-2020-7598"
      ],
      "references": [
        "https://access.redhat.com/errata/RHSA-2020:3247",
        "https://access.redhat.com/security/updates/classification/#important",
        "https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html-single/technical_notes",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1080097",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1325468",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1358501",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1427717",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1475774",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1507438",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1523835",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1527843",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1529042",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1535796",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1546838",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1547937",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1585986",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1593800",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1596178",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1600059",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1610212",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1611395",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1616451",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1637172",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1640908",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1642273",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1647440",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1648345",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1650417",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1650505",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1651406",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1651939",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1654069",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1654889",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1656621",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1658101",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1659161",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1660071",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1660644",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1663366",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1664479",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1666913",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1670102",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1671876",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1679039",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1679110",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1679471",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1679730",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1686454",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1686650",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1687345",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1690026",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1690155",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1690475",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1691562",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1692592",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1693628",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1693813",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1695026",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1695635",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1696245",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1696669",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1696676",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1698009",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1698102",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1700021",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1700036",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1700319",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1700338",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1700725",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1700867",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1701476",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1701491",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1701522",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1701528",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1701530",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1701531",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1701533",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1701538",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1701544",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1702310",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1702312",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1703112",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1703428",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1707225",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1708624",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1710491",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1711006",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1712255",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1712746",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1712890",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1714528",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1714633",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1714834",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1715725",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1716590",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1718818",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1720686",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1720694",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1720795",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1724959",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1727025",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1728472",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1729511",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1729811",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1730264",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1730436",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1731212",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1731590",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1733031",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1733529",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1733843",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1734839",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1737234",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1737684",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1740978",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1741102",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1741271",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1741625",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1743690",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1744557",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1745384",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1745504",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1746272",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1746430",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1746877",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1747772",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1749284",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1749944",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1750212",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1750348",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1750357",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1750371",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1750482",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1751215",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1751268",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1751423",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1752890",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1752995",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1753629",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1753661",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1753664",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1754363",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1754490",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1755412",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1758048",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1758289",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1762281",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1763992",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1764289",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1764791",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1764932",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1764943",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1764959",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1765660",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1767319",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1767483",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1768707",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1768844",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1769463",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1770237",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1771793",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1773313",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1777954",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1779580",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1781001",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1782236",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1782279",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1782882",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1784049",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1784385",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1785750",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1788424",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1796809",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1796811",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1796815",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1796817",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1797316",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1797500",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1798114",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1798117",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1798120",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1798127",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1798137",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1799171",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1799204",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1801149",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1801709",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1803597",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1805669",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1806276",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1807047",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1807860",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1808096",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1808126",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1809040",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1809052",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1809875",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1809877",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1810893",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1811865",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1811869",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1812875",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1813305",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1813344",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1814197",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1814215",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1816017",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1816643",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1816654",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1816693",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1816739",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1817467",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1818745",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1819201",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1819248",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1819514",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1819960",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1820621",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1820638",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1821164",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1821930",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1824095",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1825793",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1826248",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1826437",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1826801",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1826855",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1828406",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1828669",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1828736",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1829189",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1829656",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1829830",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1832161",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1834523",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1838493",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1841495",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1842495",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1844270",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1844855",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1845473",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1847420",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1850004",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1853444",
        "https://bugzilla.redhat.com/show_bug.cgi?id=1854563",
        "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3247.json",
        "https://access.redhat.com/security/cve/CVE-2017-18635",
        "https://www.cve.org/CVERecord?id=CVE-2017-18635",
        "https://nvd.nist.gov/vuln/detail/CVE-2017-18635",
        "https://github.com/novnc/noVNC/releases/tag/v0.6.2",
        "https://access.redhat.com/security/cve/CVE-2019-8331",
        "https://www.cve.org/CVERecord?id=CVE-2019-8331",
        "https://nvd.nist.gov/vuln/detail/CVE-2019-8331",
        "https://access.redhat.com/security/cve/CVE-2019-13990",
        "https://www.cve.org/CVERecord?id=CVE-2019-13990",
        "https://nvd.nist.gov/vuln/detail/CVE-2019-13990",
        "https://access.redhat.com/security/cve/CVE-2019-19336",
        "https://www.cve.org/CVERecord?id=CVE-2019-19336",
        "https://nvd.nist.gov/vuln/detail/CVE-2019-19336",
        "https://access.redhat.com/security/cve/CVE-2020-7598",
        "https://www.cve.org/CVERecord?id=CVE-2020-7598",
        "https://nvd.nist.gov/vuln/detail/CVE-2020-7598",
        "https://snyk.io/vuln/SNYK-JS-MINIMIST-559764",
        "https://access.redhat.com/security/cve/CVE-2020-10775",
        "https://www.cve.org/CVERecord?id=CVE-2020-10775",
        "https://nvd.nist.gov/vuln/detail/CVE-2020-10775",
        "https://access.redhat.com/security/cve/CVE-2020-11022",
        "https://www.cve.org/CVERecord?id=CVE-2020-11022",
        "https://nvd.nist.gov/vuln/detail/CVE-2020-11022",
        "https://github.com/advisories/GHSA-gxr4-xjj5-5px2",
        "https://access.redhat.com/security/cve/CVE-2020-11023",
        "https://www.cve.org/CVERecord?id=CVE-2020-11023",
        "https://nvd.nist.gov/vuln/detail/CVE-2020-11023",
        "https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2017-18635",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2019-13990",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2019-19336",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2019-8331",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2020-10775",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2020-11022",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2020-11023",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2020-7598",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 111780,
  "published_at": "2024-09-20T13:57:00+00:00"
}