RHSA-2020:4670MediumCVSS 6.1

Red Hat Security Advisory: idm:DL1 and idm:client security, bug fix, and enhancement update

Published
November 4, 2020
Last Modified
August 4, 2026

🔗 CVE IDs covered (10)

CVE-2015-9251 →CVE-2016-10735 →CVE-2018-14042 →CVE-2018-20676 →CVE-2018-20677 →CVE-2019-8331 →CVE-2020-1722 →CVE-2018-14040 →CVE-2019-11358 →CVE-2020-11022 →

📋 Description

CVE-2015-9251 — jquery: Cross-site scripting via cross-domain ajax requests CVE-2016-10735 — bootstrap: XSS in the data-target attribute CVE-2018-14040 — bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute CVE-2018-14042 — bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip CVE-2018-20676 — bootstrap: XSS in the tooltip data-viewport attribute CVE-2018-20677 — bootstrap: XSS in the affix configuration target property CVE-2019-8331 — bootstrap: XSS in the tooltip or popover data-template attribute CVE-2019-11358 — jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection CVE-2020-1722 — ipa: No password length restriction leads to denial of service CVE-2020-11022 — jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method

🎯 Affected products166

  • Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-0:11.3-1.module+el8.3.0+6993+104f8db0.aarch64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-0:11.3-1.module+el8.3.0+6993+104f8db0.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-0:11.3-1.module+el8.3.0+6993+104f8db0.s390x (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-0:11.3-1.module+el8.3.0+6993+104f8db0.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-0:11.3-1.module+el8.3.0+6993+104f8db0.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debuginfo-0:11.3-1.module+el8.3.0+6993+104f8db0.aarch64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debuginfo-0:11.3-1.module+el8.3.0+6993+104f8db0.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debuginfo-0:11.3-1.module+el8.3.0+6993+104f8db0.s390x (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debuginfo-0:11.3-1.module+el8.3.0+6993+104f8db0.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debugsource-0:11.3-1.module+el8.3.0+6993+104f8db0.aarch64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debugsource-0:11.3-1.module+el8.3.0+6993+104f8db0.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debugsource-0:11.3-1.module+el8.3.0+6993+104f8db0.s390x (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debugsource-0:11.3-1.module+el8.3.0+6993+104f8db0.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • custodia-0:0.6.0-3.module+el8.1.0+4098+f286395e.noarch (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • custodia-0:0.6.0-3.module+el8.1.0+4098+f286395e.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-0:4.8.7-12.module+el8.3.0+8222+c1bff54a.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-0:4.8.7-12.module+el8.3.0+8223+6212645f.src (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.8.7-12.module+el8.3.0+8222+c1bff54a.aarch64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.8.7-12.module+el8.3.0+8222+c1bff54a.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.8.7-12.module+el8.3.0+8222+c1bff54a.s390x (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.8.7-12.module+el8.3.0+8222+c1bff54a.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.8.7-12.module+el8.3.0+8223+6212645f.aarch64 (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.8.7-12.module+el8.3.0+8223+6212645f.ppc64le (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.8.7-12.module+el8.3.0+8223+6212645f.s390x (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.8.7-12.module+el8.3.0+8223+6212645f.x86_64 (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-common-0:4.8.7-12.module+el8.3.0+8222+c1bff54a.noarch (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-common-0:4.8.7-12.module+el8.3.0+8223+6212645f.noarch (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-debuginfo-0:4.8.7-12.module+el8.3.0+8222+c1bff54a.aarch64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-debuginfo-0:4.8.7-12.module+el8.3.0+8222+c1bff54a.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +136 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (64)