Skip to content
OpenAdvisories
Medium 1 exploited CVE ALSA-2021:1846 1 CVE

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

Published May 18, 2021 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution (CVE-2020-11023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 28

ReleasePackageFixed in
AlmaLinux · 8 bind-dyndb-ldap 11.6-2.module_el8.5.0+2603+92118e57
AlmaLinux · 8 custodia 0.6.0-3.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 custodia 0.6.0-3.module_el8.5.0+2603+92118e57
AlmaLinux · 8 opendnssec 2.1.7-1.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 opendnssec 2.1.7-1.module_el8.5.0+2603+92118e57
AlmaLinux · 8 python3-custodia 0.6.0-3.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 python3-custodia 0.6.0-3.module_el8.5.0+2603+92118e57
AlmaLinux · 8 python3-jwcrypto 0.5.0-1.module_el8.5.0+2603+92118e57
AlmaLinux · 8 python3-jwcrypto 0.5.0-1.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 python3-jwcrypto 0.5.0-1.module_el8.6.0+2737+7e73ea90
AlmaLinux · 8 python3-kdcproxy 0.4-5.module_el8.5.0+2603+92118e57
AlmaLinux · 8 python3-kdcproxy 0.4-5.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 python3-pyusb 1.0.0-9.module_el8.5.0+2603+92118e57
AlmaLinux · 8 python3-pyusb 1.0.0-9.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 python3-pyusb 1.0.0-9.module_el8.6.0+2737+7e73ea90
AlmaLinux · 8 python3-qrcode 5.1-12.module_el8.5.0+2603+92118e57
AlmaLinux · 8 python3-qrcode 5.1-12.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 python3-qrcode 5.1-12.module_el8.6.0+2737+7e73ea90
AlmaLinux · 8 python3-qrcode-core 5.1-12.module_el8.6.0+2737+7e73ea90
AlmaLinux · 8 python3-qrcode-core 5.1-12.module_el8.5.0+2603+92118e57
AlmaLinux · 8 python3-qrcode-core 5.1-12.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 python3-yubico 1.3.2-9.module_el8.6.0+2737+7e73ea90
AlmaLinux · 8 python3-yubico 1.3.2-9.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 python3-yubico 1.3.2-9.module_el8.5.0+2603+92118e57
AlmaLinux · 8 softhsm 2.6.0-5.module_el8.5.0+2603+92118e57
AlmaLinux · 8 softhsm 2.6.0-5.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 softhsm-devel 2.6.0-5.module_el8.6.0+2881+2f24dc92
AlmaLinux · 8 softhsm-devel 2.6.0-5.module_el8.5.0+2603+92118e57

Vulnerabilities 1

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025

References

  • report
    https://bugzilla.redhat.com/1340463
  • report
    https://bugzilla.redhat.com/1357495
  • report
    https://bugzilla.redhat.com/1484088
  • report
    https://bugzilla.redhat.com/1542737
  • report
    https://bugzilla.redhat.com/1544379
  • report
    https://bugzilla.redhat.com/1660877
  • report
    https://bugzilla.redhat.com/1779981
  • report
    https://bugzilla.redhat.com/1780328
  • report
    https://bugzilla.redhat.com/1780510
  • report
    https://bugzilla.redhat.com/1780782
  • report
    https://bugzilla.redhat.com/1784657
  • report
    https://bugzilla.redhat.com/1809215
  • report
    https://bugzilla.redhat.com/1810148
  • report
    https://bugzilla.redhat.com/1812871
  • report
    https://bugzilla.redhat.com/1824193
  • report
    https://bugzilla.redhat.com/1850004
  • report
    https://bugzilla.redhat.com/1851835
  • report
    https://bugzilla.redhat.com/1857272
  • report
    https://bugzilla.redhat.com/1860129
  • report
    https://bugzilla.redhat.com/1866558
  • report
    https://bugzilla.redhat.com/1872603
  • report
    https://bugzilla.redhat.com/1875001
  • report
    https://bugzilla.redhat.com/1882340
  • report
    https://bugzilla.redhat.com/1891056
  • report
    https://bugzilla.redhat.com/1891505
  • report
    https://bugzilla.redhat.com/1891735
  • report
    https://bugzilla.redhat.com/1891741
  • report
    https://bugzilla.redhat.com/1891832
  • report
    https://bugzilla.redhat.com/1891850
  • report
    https://bugzilla.redhat.com/1894800
  • report
    https://bugzilla.redhat.com/1901068
  • report
    https://bugzilla.redhat.com/1902173
  • report
    https://bugzilla.redhat.com/1902727
  • report
    https://bugzilla.redhat.com/1903025
  • report
    https://bugzilla.redhat.com/1904484
  • report
    https://bugzilla.redhat.com/1904612
  • report
    https://bugzilla.redhat.com/1905919
  • report
    https://bugzilla.redhat.com/1909876
  • report
    https://bugzilla.redhat.com/1912845