RHBA-2025:1600MediumCVSS 6.1

Red Hat Bug Fix Advisory: Red Hat Quay v3.10.9 bug fix release

Published
February 24, 2025
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2020-11023 →

📋 Description

CVE-2020-11023 — jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods

🎯 Affected products31

  • Quay v3
  • quay/clair-rhel8@sha256:1557acebfe258f88c6a5890dd9b830943bf4a3be6834b0fbf0d2c9f32e40bab9_s390x as a component of Quay v3
  • quay/clair-rhel8@sha256:2c2ecd3f49a8645eca1c4708e3c4e0e0771734b12e33d6cd6428d8a1ccc38719_amd64 as a component of Quay v3
  • quay/clair-rhel8@sha256:c20ba1c658aaf803713a50eefdc88fbefa64294287aa7474e72916a9d8000a5a_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:02ca9f9006d62fd5549b7b17dff959a544d3561e19888bbadc9c83ec2366253a_s390x as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:c5ba386cc65a303e5fcb76a407c5b47ec98e76b411e31f3498c3ec58d7653192_amd64 as a component of Quay v3
  • quay/quay-bridge-operator-bundle@sha256:dc892f7daf2e323d55ab7611738cf3e66e41fed377cbfb7cbc8758df8a2d36b7_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:22fcdc241bb49a88fb0384d09da023db070fae05eec6e37f7b4f52e4cdc35dab_ppc64le as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:437068f5ae4cd5ffc3628a08be850177e213f6e876286aab3630af9f83e3e9b1_s390x as a component of Quay v3
  • quay/quay-bridge-operator-rhel8@sha256:a078bb2fa0842ccbc40d26572f6b79beb78e9fb602c99c4bb6bca53040fce04f_amd64 as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:294b33b88cda984cea4e86ffa86bc56ea163c741d0c429fc95523e7ce3e289cd_amd64 as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:48a2e4ce23e51c3196cfaf781b4419fb0939838776df046db062a075e103410f_s390x as a component of Quay v3
  • quay/quay-builder-qemu-rhcos-rhel8@sha256:757b31e1d202243bf243b5d4e6e4785b2f37a603f24f568fbb604ba5a957e78c_ppc64le as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:3996e8ef02ed9b6cedf9bc8d6f25d3972d3558652613490013fe64b64331a22d_ppc64le as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:937819ced9bd302aae3d048a470d50475b2e4c34347a4ff1c83843fda71ffe7f_s390x as a component of Quay v3
  • quay/quay-builder-rhel8@sha256:bd60fd0dd4339f532af75f47b2fef45f5d859bec19727a72425aae148715c4ab_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:a6980f2d188b32ab0d9f78b471ded0c2c2b1f58746a4890a880dc6b9f257a2d0_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:e31825f0461cb54e6d21c36cb6bbbb8fbeb61943c459184836653a3a850a4089_amd64 as a component of Quay v3
  • quay/quay-container-security-operator-bundle@sha256:e322a843ea4578b7c24ee6486cb8cc430db4f22588b071f99522c42d5cca29ec_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:026ffd6c71975c0e58a498508a5512979d241aaf6ae56588094c48cf78bf52d7_s390x as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:64ce86fb690eef8d8a0896fa44b6292401222592ced1978ffb2450c9727fc50a_ppc64le as a component of Quay v3
  • quay/quay-container-security-operator-rhel8@sha256:86f789197043c3acc481883a7abe70ec22ce9e1acc98ca2dc51a97d54fb2d992_amd64 as a component of Quay v3
  • quay/quay-operator-bundle@sha256:4e5d9a6fe8e10dacf7b65f752b5d84bec38d707cba8bd95513fe7c9de7c75c47_s390x as a component of Quay v3
  • quay/quay-operator-bundle@sha256:5685b4aa856ac7c2c9d434ad96fa55981f4bae45a4eaa4747b34752b4454ef49_ppc64le as a component of Quay v3
  • quay/quay-operator-bundle@sha256:d4f2c24ed74f76af477427b7bb7159d08f480fa9890cb1227307b286c9be2771_amd64 as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:67737aa0e08a5d8a9ee40cc08d00c6d8211b583c5936e9a426f6a5f625b184aa_s390x as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:d2b310ddc6c5d000234c8d8ac1c9e993c2de49426c251d36077c504a51ab9460_ppc64le as a component of Quay v3
  • quay/quay-operator-rhel8@sha256:e1d90bda5bed0ede104b699e42fb69eae32cd2bf786c0864626b8fbb6a311dcf_amd64 as a component of Quay v3
  • quay/quay-rhel8@sha256:092d1d030ba909855a3de504e0373fc9cbf6d74dd5dca3f94b151e5c3ce4d6ff_amd64 as a component of Quay v3
  • quay/quay-rhel8@sha256:59bec1f6dee73acd7e2df63feb1f577dc8e9c391fe5b18b3c1535f2fa4cbbae9_s390x as a component of Quay v3
  • +1 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (2)