Red Hat Security AdvisoryRHSA-2025:1255
doxygen security update
Released 2025-02-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) doxygen-1:1.8.5-4.el7_9.1
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) doxygen-doxywizard-1:1.8.5-4.el7_9.1, doxygen-latex-1:1.8.5-4.el7_9.1
Fixes 1 record
Priority CRITICAL 88KEV
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.
CVSS 3.1MEDIUM 6.9· Network · No auth · User interaction · EPSS 0.84887 · Published 2020-04-29 · Partial fix · 3.5.0, 4.4.0 CWE-79
