Red Hat Security AdvisoryRHSA-2015:1462
ipa security and bug fix update
Released 2015-07-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) ipa-3.0.0-47.el6, ipa-client-3.0.0-47.el6, ipa-python-3.0.0-47.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) ipa-admintools-3.0.0-47.el6, ipa-server-3.0.0-47.el6, ipa-server-selinux-3.0.0-47.el6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) ipa-3.0.0-47.el6, ipa-client-3.0.0-47.el6, ipa-python-3.0.0-47.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ipa-admintools-3.0.0-47.el6, ipa-server-3.0.0-47.el6, ipa-server-selinux-3.0.0-47.el6 +1
- Red Hat Enterprise Linux Server (v. 6) ipa-3.0.0-47.el6, ipa-admintools-3.0.0-47.el6, ipa-client-3.0.0-47.el6 +4
- Red Hat Enterprise Linux Workstation (v. 6) ipa-3.0.0-47.el6, ipa-admintools-3.0.0-47.el6, ipa-client-3.0.0-47.el6 +4
Fixes 2 records
Priority MEDIUM 45
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.18351 · Published 2014-11-24 · Partial fix · 1.10.0, 4.0.0 CWE-79
Priority LOW 30
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07475 · Published 2014-11-24 · Partial fix · 1.10.0, 4.0.0 CWE-79