RHSA-2021:1846MediumCVSS 6.1

Red Hat Security Advisory: idm:DL1 and idm:client security, bug fix, and enhancement update

Published
May 18, 2021
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2020-11023 →

📋 Description

CVE-2020-11023 — jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods

🎯 Affected products167

  • Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-0:11.6-2.module+el8.4.0+9328+4ec4e316.aarch64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-0:11.6-2.module+el8.4.0+9328+4ec4e316.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-0:11.6-2.module+el8.4.0+9328+4ec4e316.s390x (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-0:11.6-2.module+el8.4.0+9328+4ec4e316.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-0:11.6-2.module+el8.4.0+9328+4ec4e316.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debuginfo-0:11.6-2.module+el8.4.0+9328+4ec4e316.aarch64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debuginfo-0:11.6-2.module+el8.4.0+9328+4ec4e316.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debuginfo-0:11.6-2.module+el8.4.0+9328+4ec4e316.s390x (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debuginfo-0:11.6-2.module+el8.4.0+9328+4ec4e316.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debugsource-0:11.6-2.module+el8.4.0+9328+4ec4e316.aarch64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debugsource-0:11.6-2.module+el8.4.0+9328+4ec4e316.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debugsource-0:11.6-2.module+el8.4.0+9328+4ec4e316.s390x (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-dyndb-ldap-debugsource-0:11.6-2.module+el8.4.0+9328+4ec4e316.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • custodia-0:0.6.0-3.module+el8.1.0+4098+f286395e.noarch (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • custodia-0:0.6.0-3.module+el8.1.0+4098+f286395e.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-0:4.9.2-3.module+el8.4.0+10412+5ecb5b37.src (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-0:4.9.2-3.module+el8.4.0+10413+a92f1bfa.src (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.9.2-3.module+el8.4.0+10412+5ecb5b37.aarch64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.9.2-3.module+el8.4.0+10412+5ecb5b37.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.9.2-3.module+el8.4.0+10412+5ecb5b37.s390x (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.9.2-3.module+el8.4.0+10412+5ecb5b37.x86_64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.9.2-3.module+el8.4.0+10413+a92f1bfa.aarch64 (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.9.2-3.module+el8.4.0+10413+a92f1bfa.ppc64le (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.9.2-3.module+el8.4.0+10413+a92f1bfa.s390x (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-0:4.9.2-3.module+el8.4.0+10413+a92f1bfa.x86_64 (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-common-0:4.9.2-3.module+el8.4.0+10412+5ecb5b37.noarch (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-common-0:4.9.2-3.module+el8.4.0+10413+a92f1bfa.noarch (idm:client) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-debuginfo-0:4.9.2-3.module+el8.4.0+10412+5ecb5b37.aarch64 (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • ipa-client-debuginfo-0:4.9.2-3.module+el8.4.0+10412+5ecb5b37.ppc64le (idm:DL1) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +137 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (56)