Red Hat Security AdvisoryRHSA-2021:0860
ipa security and bug fix update
Released 2021-03-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ipa-4.6.8-5.el7_9.4, ipa-client-4.6.8-5.el7_9.4, ipa-client-common-4.6.8-5.el7_9.4 +4
- Red Hat Enterprise Linux Client Optional (v. 7) ipa-server-4.6.8-5.el7_9.4, ipa-server-common-4.6.8-5.el7_9.4, ipa-server-dns-4.6.8-5.el7_9.4 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ipa-server-4.6.8-5.el7_9.4, ipa-server-common-4.6.8-5.el7_9.4, ipa-server-dns-4.6.8-5.el7_9.4 +2
- Red Hat Enterprise Linux Server (v. 7) ipa-4.6.8-5.el7_9.4, ipa-client-4.6.8-5.el7_9.4, ipa-client-common-4.6.8-5.el7_9.4 +9
- Red Hat Enterprise Linux Workstation (v. 7) ipa-4.6.8-5.el7_9.4, ipa-client-4.6.8-5.el7_9.4, ipa-client-common-4.6.8-5.el7_9.4 +9
Fixes 1 record
Priority CRITICAL 88KEV
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.
CVSS 3.1MEDIUM 6.9· Network · No auth · User interaction · EPSS 0.84887 · Published 2020-04-29 · Partial fix · 3.5.0, 4.4.0 CWE-79
