RHSA-2025:2426MediumCVSS 6.1

Red Hat Security Advisory: pki-core security update

Published
March 6, 2025
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2020-11023 →

📋 Description

CVE-2020-11023 — jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods

🎯 Affected products13

  • Red Hat Enterprise Linux Server AUS (v. 7.7)
  • Red Hat Enterprise Linux Server Optional AUS (v. 7.7)
  • pki-base-0:10.5.16-8.el7_7.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)
  • pki-base-java-0:10.5.16-8.el7_7.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)
  • pki-ca-0:10.5.16-8.el7_7.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)
  • pki-core-0:10.5.16-8.el7_7.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)
  • pki-core-0:10.5.16-8.el7_7.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)
  • pki-core-debuginfo-0:10.5.16-8.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)
  • pki-javadoc-0:10.5.16-8.el7_7.noarch as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)
  • pki-kra-0:10.5.16-8.el7_7.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)
  • pki-server-0:10.5.16-8.el7_7.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)
  • pki-symkey-0:10.5.16-8.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)
  • pki-tools-0:10.5.16-8.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (4)