Red Hat Security Advisory

RHSA-2025:2426

pki-core security update

Released 2025-03-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.7) pki-base-10.5.16-8.el7_7, pki-base-java-10.5.16-8.el7_7, pki-ca-10.5.16-8.el7_7 +5
Red Hat Enterprise Linux Server Optional AUS (v. 7.7) pki-core-10.5.16-8.el7_7, pki-javadoc-10.5.16-8.el7_7

Fixes 1 record

TI-2020-08897 CVE-2020-11023 · GHSA-jpcq-cgw6-v4j6

Potential XSS vulnerability in jQuery

CRITICAL 88KEV

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.84887 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 CWE-79