Red Hat Security AdvisoryRHSA-2015:0442
ipa security, bug fix, and enhancement update
Released 2015-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ipa-4.1.0-18.el7, ipa-client-4.1.0-18.el7, ipa-python-4.1.0-18.el7
- Red Hat Enterprise Linux Client Optional (v. 7) ipa-admintools-4.1.0-18.el7, ipa-server-4.1.0-18.el7, ipa-server-trust-ad-4.1.0-18.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) ipa-4.1.0-18.el7, ipa-client-4.1.0-18.el7, ipa-python-4.1.0-18.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ipa-admintools-4.1.0-18.el7, ipa-server-4.1.0-18.el7, ipa-server-trust-ad-4.1.0-18.el7
- Red Hat Enterprise Linux Server (v. 7) ipa-4.1.0-18.el7, ipa-admintools-4.1.0-18.el7, ipa-client-4.1.0-18.el7 +3
- Red Hat Enterprise Linux Server Optional (v. 7) ipa-admintools-4.1.0-18.el7
- Red Hat Enterprise Linux Workstation (v. 7) ipa-4.1.0-18.el7, ipa-admintools-4.1.0-18.el7, ipa-client-4.1.0-18.el7 +3
Fixes 2 records
Priority MEDIUM 45
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.18351 · Published 2014-11-24 · Partial fix · 1.10.0, 4.0.0 CWE-79
Priority LOW 30
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07475 · Published 2014-11-24 · Partial fix · 1.10.0, 4.0.0 CWE-79
