RHBA-2025:1599MediumCVSS 6.1

Red Hat Bug Fix Advisory: Red Hat Quay v3.11.9 bug fix release

Published
February 24, 2025
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2020-11023 →

📋 Description

CVE-2020-11023 — jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods

🎯 Affected products31

  • Quay v3
  • quay/clair-rhel8@sha256:222ccf497cd725a8a519bf5bb70114aaaeae202ab6261773de68739f8288e5a9_s390x as a component of Quay v3
  • quay/clair-rhel8@sha256:312ea2faf145194b69cdedfe8c889db88c3522e39b34df375b10a50b606e5f67_amd64 as a component of Quay v3
  • quay/clair-rhel8@sha256:fdd0128c0b0a6092b75ca1019a8a0acc19aba085ff52f33befdc62677f05dab8_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:342df26dec42be016f35f5cdea13ab67dfb431d200f96ab4073170207f916fb9_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:a211e80601adefb01aa19f50882bf5dddafc21bd35c47c4d4e044172bd70cbe4_s390x as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:f255b26a3e2156e2bdd1877ab2e2bf6c98e8cbafed05fa307aa8b52c04d091b1_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:10630145c20a6e142b4a49ca42990467f6378e1832985df5c9c4f1deefeb5ad0_s390x as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:6134fd306361614404008d9c8d38d41a88e5d496fe27d7e359f46d6f30fe9dc3_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:81ff35e4cc924a4136abf7299395877a784e2fa181e481efe3340712626144c3_ppc64le as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:55c3cfa5a04215f29b1497a84ce38bed48ec335f0c1ee14adda129e360709a15_ppc64le as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:7c619cc603d57e44d861856c5162e84923d87787c17613857e8d51f3ef4050c3_s390x as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:bab6d6b27ad3ed42bc816af7e5253fd9be45c13b4d272008593271e569e2c8fa_amd64 as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:5f81ddef9a2437c724d293b3accd3ca0187e2c3d409257d39b7f1dbdfdb1b47e_ppc64le as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:76284d20210b23e0bd924fcd87090257896ba77a8dcdab1a01564982db444664_s390x as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:9b540206059435c7ff3ab298bec1e84d779894842b5c678a0c1773547548a1fa_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:03eee647fc3ebd47a6883b72d7000d8e6b7632ed76dd416de1ec67f36de23cb2_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:7a9781bf54a72ea7cf61965043a0fdce7c5f1e5cbd9bfbd1203c94510c4e96b8_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:c5432bdaf5a4f76d8bbe1e0f15f68d55aef859b373373a4128062808792e1ef9_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:2dfaef2d69f72a3efe4ad941f29da00258a18b88aaeb3435afe4c78fceddf847_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:3987efeb2b67b08b078ede3772ea302369ef7ac7bd2f7f8830274acf96e48f26_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:87a61f2a4a1fedf6df76829ac3ada602136c3252ba8c6ca08023bd5afab165ad_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:03d6966a76dc2caf6e9cfc009342be32fa9824e6f191ce5b19fcbe5fb45c2ffb_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:7abf56ac447f36f85b0c3da70cca5c85826241b2fbcef9abc7ed734cf993e574_s390x as a component of Quay v3
  • quay/quay-operator-bundle@sha256:eb72dbb111fb0488643bd09b451e6e884c2af236dcad2863ab5be873d50573a6_ppc64le as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:238b10259a1a84c5782f296d01ac83a5e6a80a61374567ccfeded07bca1e22c1_ppc64le as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:6247ee46a1499030df1fb53bb4bb7247cf320f69aa5df0fe0e0e1b5757348b19_amd64 as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:7cc512e89aaaacde997a4908e52f33173f0f3e4178f6449572d49da8b50e10d6_s390x as a component of Quay v3
  • quay/quay-rhel8@sha256:4964472329ea4d13842732a2de187443a1f383928041044d5621219912440d65_s390x as a component of Quay v3
  • quay/quay-rhel8@sha256:6bfe9f567cd30744104c7481a1af5c16f5861fe5617053a66a686218e351aca5_amd64 as a component of Quay v3
  • +1 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (2)