Red Hat Security Advisory

RHSA-2021:1846

idm:DL1 and idm:client security, bug fix, and enhancement update

Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.aarch64::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.ppc64le::idm:DL1, bind-dyndb-ldap-11.6-2.module+el8.4.0+9328+4ec4e316.s390x::idm:DL1 +47

Fixes 1 record

TI-2020-08897 CVE-2020-11023 · GHSA-jpcq-cgw6-v4j6

Potential XSS vulnerability in jQuery

CRITICAL 88KEV

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.84887 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 CWE-79