Red Hat Security Advisory: ipa security and bug fix update

Fixed packages 32

Vulnerabilities 2

• Medium 6.1
  CVE-2010-5312 EPSS 18%

  Cross-site Scripting in jquery-ui

  Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

  drupal7 org.webjars.npm:jquery-ui jqueryui jquery-ui Debian Alpine npm Maven NuGet RubyGems
  Nov 24, 2014
• Medium —
  CVE-2012-6662

  jquery-ui Tooltip widget vulnerable to XSS

  Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handl…

  jquery-ui jquery-ui-rails jQuery.UI.Combined org.webjars.npm:jquery-ui Debian npm Maven NuGet RubyGems
  Nov 24, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1132261
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1146870
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1154687
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1166041
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1166064
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1185207
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1198339
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1201454
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1205660
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1207649
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1220788
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1462.json
• report
  https://access.redhat.com/security/cve/CVE-2010-5312
• advisory
  https://www.cve.org/CVERecord?id=CVE-2010-5312
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2010-5312
• report
  https://access.redhat.com/security/cve/CVE-2012-6662
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-6662
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-6662