Red Hat Security Advisory: ipa security, bug fix, and enhancement update

Fixed packages 28

Vulnerabilities 2

• Medium 6.1
  CVE-2010-5312 EPSS 18%

  Cross-site Scripting in jquery-ui

  Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

  drupal7 org.webjars.npm:jquery-ui jqueryui jquery-ui Debian Alpine npm Maven NuGet RubyGems
  Nov 24, 2014
• Medium —
  CVE-2012-6662

  jquery-ui Tooltip widget vulnerable to XSS

  Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handl…

  jquery-ui jquery-ui-rails jQuery.UI.Combined org.webjars.npm:jquery-ui Debian npm Maven NuGet RubyGems
  Nov 24, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.1_Release_Notes/index.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=711693
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=788645
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=815828
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=817909
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=854335
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=887988
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=891984
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=893850
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=921655
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=922749
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=924008
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=924395
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=951581
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=970618
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=971061
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=975456
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=985234
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1027712
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1027713
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1030699
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1031111
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1033357
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1035286
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1048934
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1048956
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1056202
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1058780
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1060349
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1061772
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1072502
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1075129
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1077734
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1080209
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1080532
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1081626
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1084609
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1099811