Summary
[14.2.1-1.3]
- disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78383)
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | gcc-toolset-14-gcc | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-gcc-c++ | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-gcc-gfortran | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-gcc-plugin-annobin | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-gcc-plugin-devel | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-libasan-devel | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-libatomic-devel | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-libgccjit | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-libgccjit-devel | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-libitm-devel | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-liblsan-devel | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-libquadmath-devel | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-libstdc++-devel | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-libstdc++-docs | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-libtsan-devel | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-libubsan-devel | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | gcc-toolset-14-offload-nvptx | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | libasan8 | 0:14.2.1-1.3.el9_5 |
| Oracle Linux · 9 | libtsan2 | 0:14.2.1-1.3.el9_5 |
Vulnerabilities 1
-
Medium 6.9
Potential XSS vulnerability in jQuery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…
KEV Jan 23, 2025