Skip to content
OpenAdvisories
Medium 1 exploited CVE RHSA-2021:0860 1 CVE

Red Hat Security Advisory: ipa security and bug fix update

Published Sep 18, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 45

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client ipa 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-client 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-client-common 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-common 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-debuginfo 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-python-compat 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-server 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-server-common 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-server-dns 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client ipa-server-trust-ad 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client python2-ipaclient 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client python2-ipalib 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::client python2-ipaserver 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-debuginfo 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-server 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-server-common 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-server-dns 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::computenode ipa-server-trust-ad 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::computenode python2-ipaserver 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-client 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-client-common 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-common 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-debuginfo 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-python-compat 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-server 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-server-common 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-server-dns 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server ipa-server-trust-ad 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server python2-ipaclient 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server python2-ipalib 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::server python2-ipaserver 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-client 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-client-common 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-common 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-debuginfo 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-python-compat 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-server 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-server-common 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-server-dns 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation ipa-server-trust-ad 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation python2-ipaclient 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation python2-ipalib 0:4.6.8-5.el7_9.4
Red Hat · RHEL 7 enterprise_linux:7::workstation python2-ipaserver 0:4.6.8-5.el7_9.4

Vulnerabilities 1

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1846349
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1850004
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1863619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1884819
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1892793
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1895197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1897253
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0860.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-11023
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-11023
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-11023
  • article
    https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog