RHBA-2025:1598MediumCVSS 6.1

Red Hat Bug Fix Advisory: Red Hat Quay v3.12.8 bug fix release

Published
February 24, 2025
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2020-11023 →

📋 Description

CVE-2020-11023 — jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods

🎯 Affected products31

  • Quay v3
  • quay/clair-rhel8@sha256:8c4dc7ffe59ab71bafc90e57b4c8f31879e18127d7c688ad13fc74b218b81b90_s390x as a component of Quay v3
  • quay/clair-rhel8@sha256:bf9818512c7fe88272fb8f7fc4a255d6bc5e3842582e4fd891558a89d406d8e9_ppc64le as a component of Quay v3
  • quay/clair-rhel8@sha256:cdda23eec3cf0caf153089fb59be85ecaa50a3918ef78e0f11892045f9918ef3_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:5a20c2d291a56f0d660071f7d4636ca0bbcf094e9cc4380e64901fcf49e30ea8_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:689ff61a796a64d8c00aa430f34ffcceed2d89a3a3cc087b805f1fae33e80ea6_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:9b37ea0b977e20326facc581b6980b187cfc0d5e5ed6eb1e6a6c8794321ec994_s390x as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:8f7ea21b962abb00500141db4abf43d7c80ed585cbddcbe37c491bdbca1690d7_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:bdda4ec419724ce68af416eaebb2b6e4be16ea2c33595be506cf2fd5beef4056_s390x as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:fd0d3139530d2a99a3e053d07266d14dccd73ac18e7ef073619de415069520dd_ppc64le as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:af6a7a92aa23a114da79903c205499c3843de181c8fab0195fb6c5d493fa1168_amd64 as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:b91aec3d3f9cf8a4204e6e13e27035802693a8517b14e59db2535fe789e7a33e_ppc64le as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:bfc9435099f0b0cde9b43df3982b6164e08bdf7dc0691af197555f029cf78563_s390x as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:6fdbffa2ddf6f5ede8c00755c5d6f57c494ddea63b59f6e288dc5217c7d81050_amd64 as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:edaa246672ae95f8a7c7fa00ec6aade33204ff37128cdec7b390c0d8f6573f13_s390x as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:f86fda437718ae80028a49aa919790ea19dabc38f8d41431a4366ae5001e46e9_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:4ea1ef2482482789b30017f5221d7f64875e5550664da63098c8151a51bd3ede_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:c81af92a6092273dea45a9dee56bbb8a246b566402497b1746fa4817a3cece39_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:d8039e2970871d4d252f38d18587a5a7f0cdee34cceb15645e52f37b8d943f59_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:46322de9eeb0681da5ab4d83432ce7a8791ae604e59ec162fcf96319cc248d02_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:5d63f41839d712a348c91d7a90593ba332cab8e77f2238cc885792af9b45e89a_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:6a5acdbb57f870efddfb93095522c3640f9ad6256c54a20f4790874d13322560_ppc64le as a component of Quay v3
  • quay/quay-operator-bundle@sha256:6cea661a5c6e0a5927b3a5a06129fc03e6678132faf9e3da5f498d8457fb2211_ppc64le as a component of Quay v3
  • quay/quay-operator-bundle@sha256:a91bb0d5e3becd59cadf51d323d1063ff675d277f9dfc7670570b1754badfacb_s390x as a component of Quay v3
  • quay/quay-operator-bundle@sha256:ea077de1039e87e20f699ab2a68fa4f825898f7164bf071cc9404653789e352f_amd64 as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:0702ae5634f99cb0775acdf0c9173a2a119816dd4e593462a9b0573ace330e2b_amd64 as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:9659a3fe53bbf44d60fea61c970daa8356f27b0a9bba4233157c5856cc338a6b_s390x as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:ee4755634f7be2e4a68ef4ae4d89cde8964d1ea62fa233b10f7456ff82cbe9fc_ppc64le as a component of Quay v3
  • quay/quay-rhel8@sha256:1a839e21cba19ea055e39f944620264bacb434fb1b6f2120fc3b8d7c3a29aae0_amd64 as a component of Quay v3
  • quay/quay-rhel8@sha256:ab2aac7247b0d75e6fcd2e5788067cf9130075c93c917da8145e5b1629d96d72_ppc64le as a component of Quay v3
  • +1 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (2)