Skip to content
OpenAdvisories
Medium 1 exploited CVE ELSA-2021-1846 1 CVE

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update (Oracle Linux 8)

Published May 25, 2021 · Updated May 25, 2021

Summary

bind-dyndb-ldap
[11.6-2]
- Rebuild against bind 9.11.26
- Resolves: rhbz#1904612

[11.6-1]
- New upstream release
- Resolves: rhbz#1891735

ipa
[4.9.2-3.0.1]
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]

[4.9.2-3]
- ipa-client-install displays false message
'sudo binary does not seem to be present on this system'
Resolves: RHBZ#1939371

[4.9.2-2]
- Sync ipatests from upstream to RHEL packages for FreeIPA 4.9 branch
Resolves: RHBZ#1932289
- Fix krb5kdc is crashing intermittently on IPA server
Resolves: RHBZ#1932784

[4.9.2-1]
- Upstream release FreeIPA 4.9.2
Related: RHBZ#1891832

opendnssec
[2.1.7-1]
- Upstream release 2.1.7
- Resolves: rhbz#1904484

softhsm
[2.6.0-5]
- Install prever devel package requirements for new negative option patch
Related: RHBZ#1857272

[2.6.0-4]
- Fixes: rhbz#1857272 - negative option for token.mechanism not working correctly

Fixed packages 30

ReleasePackageFixed in
Oracle Linux · 8 bind-dyndb-ldap 0:11.6-2.module+el8.4.0+20088+3d202164
Oracle Linux · 8 custodia 0:0.6.0-3.module+el8.3.0+7868+2151076c
Oracle Linux · 8 ipa-client 0:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
Oracle Linux · 8 ipa-client-common 0:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
Oracle Linux · 8 ipa-client-epn 0:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
Oracle Linux · 8 ipa-client-samba 0:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
Oracle Linux · 8 ipa-common 0:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
Oracle Linux · 8 ipa-healthcheck 0:0.7-3.module+el8.4.0+20088+3d202164
Oracle Linux · 8 ipa-healthcheck-core 0:0.7-3.module+el8.4.0+20089+f3f9be88
Oracle Linux · 8 ipa-python-compat 0:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
Oracle Linux · 8 ipa-selinux 0:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
Oracle Linux · 8 ipa-server 0:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
Oracle Linux · 8 ipa-server-common 0:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
Oracle Linux · 8 ipa-server-dns 0:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
Oracle Linux · 8 ipa-server-trust-ad 0:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
Oracle Linux · 8 opendnssec 0:2.1.7-1.module+el8.4.0+20088+3d202164
Oracle Linux · 8 python3-custodia 0:0.6.0-3.module+el8.3.0+7868+2151076c
Oracle Linux · 8 python3-ipaclient 0:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
Oracle Linux · 8 python3-ipalib 0:4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa
Oracle Linux · 8 python3-ipaserver 0:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
Oracle Linux · 8 python3-ipatests 0:4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37
Oracle Linux · 8 python3-jwcrypto 0:0.5.0-1.module+el8.3.0+7868+2151076c
Oracle Linux · 8 python3-kdcproxy 0:0.4-5.module+el8.3.0+7868+2151076c
Oracle Linux · 8 python3-pyusb 0:1.0.0-9.module+el8.3.0+7868+2151076c
Oracle Linux · 8 python3-qrcode 0:5.1-12.module+el8.3.0+7868+2151076c
Oracle Linux · 8 python3-qrcode-core 0:5.1-12.module+el8.3.0+7868+2151076c
Oracle Linux · 8 python3-yubico 0:1.3.2-9.module+el8.3.0+7868+2151076c
Oracle Linux · 8 slapi-nis 0:0.56.6-2.module+el8.4.0+20174+ae9fc984
Oracle Linux · 8 softhsm 0:2.6.0-5.module+el8.4.0+20161+5ecb5b37
Oracle Linux · 8 softhsm-devel 0:2.6.0-5.module+el8.4.0+20161+5ecb5b37

Vulnerabilities 1

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    KEV Jan 23, 2025