RLSA-2020:4670 — Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

Summary

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

The following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)

Security Fix(es):

* js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

* bootstrap: XSS in the data-target attribute (CVE-2016-10735)

* bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

* bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

* bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)

* bootstrap: XSS in the affix configuration target property (CVE-2018-20677)

* bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

* js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)

* jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

* ipa: No password length restriction leads to denial of service (CVE-2020-1722)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Fixed packages 9

Release	Package	Fixed in
Rocky Linux · 8	custodia	0:0.6.0-3.module+el8.4.0+429+6bd33fea
Rocky Linux · 8	python-jwcrypto	0:0.5.0-1.module+el8.4.0+429+6bd33fea
Rocky Linux · 8	python-jwcrypto	0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a
Rocky Linux · 8	python-kdcproxy	0:0.4-5.module+el8.3.0+244+0b2ae752
Rocky Linux · 8	python-qrcode	0:5.1-12.module+el8.4.0+429+6bd33fea
Rocky Linux · 8	python-yubico	0:1.3.2-9.module+el8.4.0+429+6bd33fea
Rocky Linux · 8	python-yubico	0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
Rocky Linux · 8	pyusb	0:1.0.0-9.module+el8.4.0+429+6bd33fea
Rocky Linux · 8	pyusb	0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a

Vulnerabilities 10

Medium 6.9

CVE-2020-11022 Public exploit EPSS 99%

jQuery has a potential XSS vulnerability

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3…

jquery jQuery keycloak-26.6-iamguarded-compat drupal7 Debian Ubuntu Alpine Wolfi npm Packagist Maven NuGet RubyGems

Apr 29, 2020
Medium 6.1

CVE-2015-9251 Public exploit EPSS 30%

Cross-Site Scripting (XSS) in jquery

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

ruby ceph jquery-rails org.webjars.npm:jquery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems

Jan 18, 2018
Medium 6.1

CVE-2016-10735 Public exploit

Bootstrap Cross-site Scripting vulnerability

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

bootstrap twitter-bootstrap3 twitter-bootstrap3 twbs/bootstrap Debian Ubuntu npm Packagist Maven NuGet RubyGems

Jan 9, 2019
Medium 6.1

CVE-2018-14040 Public exploit

Bootstrap vulnerable to Cross-Site Scripting (XSS)

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

reaper twitter-bootstrap3 bootstrap twitter-bootstrap3 Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems

Jul 13, 2018
Medium 6.1

CVE-2018-14042 Public exploit

Bootstrap Cross-site Scripting vulnerability

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

ceph fluent-bit pytorch twitter-bootstrap3 Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems

Jul 13, 2018
Medium 6.1

CVE-2018-20676

XSS vulnerability that affects bootstrap

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

twitter-bootstrap3 bootstrap twitter-bootstrap3 org.webjars:bootstrap Debian Ubuntu npm Packagist Maven NuGet RubyGems

Jan 9, 2019
Medium 6.1

CVE-2018-20677

bootstrap Cross-site Scripting vulnerability

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

ceph fluent-bit pytorch twitter-bootstrap3 Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems

Jan 9, 2019
Medium 6.1

CVE-2019-11358 Public exploit EPSS 87%

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…

mediawiki mediawiki django drupal/core Debian Ubuntu Azure Linux Alpine npm Packagist Maven PyPI NuGet RubyGems

Apr 19, 2019
Medium 6.1

CVE-2019-8331 Public exploit EPSS 16%

Bootstrap Vulnerable to Cross-Site Scripting

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

ceph fluent-bit pytorch ntopng Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems

Feb 20, 2019
Medium 5.3

CVE-2020-1722

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) t…

Red Hat ipa freeipa freeipa Debian Ubuntu

Apr 27, 2020

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=1399546
report
https://bugzilla.redhat.com/show_bug.cgi?id=1430365
report
https://bugzilla.redhat.com/show_bug.cgi?id=1488732
report
https://bugzilla.redhat.com/show_bug.cgi?id=1585020
report
https://bugzilla.redhat.com/show_bug.cgi?id=1601614
report
https://bugzilla.redhat.com/show_bug.cgi?id=1601617
report
https://bugzilla.redhat.com/show_bug.cgi?id=1651577
report
https://bugzilla.redhat.com/show_bug.cgi?id=1668082
report
https://bugzilla.redhat.com/show_bug.cgi?id=1668089
report
https://bugzilla.redhat.com/show_bug.cgi?id=1668097
report
https://bugzilla.redhat.com/show_bug.cgi?id=1686454
report
https://bugzilla.redhat.com/show_bug.cgi?id=1701233
report
https://bugzilla.redhat.com/show_bug.cgi?id=1701972
report
https://bugzilla.redhat.com/show_bug.cgi?id=1746830
report
https://bugzilla.redhat.com/show_bug.cgi?id=1750893
report
https://bugzilla.redhat.com/show_bug.cgi?id=1751295
report
https://bugzilla.redhat.com/show_bug.cgi?id=1757045
report
https://bugzilla.redhat.com/show_bug.cgi?id=1759888
report
https://bugzilla.redhat.com/show_bug.cgi?id=1768156
report
https://bugzilla.redhat.com/show_bug.cgi?id=1777806
report
https://bugzilla.redhat.com/show_bug.cgi?id=1793071
report
https://bugzilla.redhat.com/show_bug.cgi?id=1801698
report
https://bugzilla.redhat.com/show_bug.cgi?id=1802471
report
https://bugzilla.redhat.com/show_bug.cgi?id=1809835
report
https://bugzilla.redhat.com/show_bug.cgi?id=1810154
report
https://bugzilla.redhat.com/show_bug.cgi?id=1810179
report
https://bugzilla.redhat.com/show_bug.cgi?id=1813330
report
https://bugzilla.redhat.com/show_bug.cgi?id=1816784
report
https://bugzilla.redhat.com/show_bug.cgi?id=1818765
report
https://bugzilla.redhat.com/show_bug.cgi?id=1818877
report
https://bugzilla.redhat.com/show_bug.cgi?id=1828406
report
https://bugzilla.redhat.com/show_bug.cgi?id=1831732
report
https://bugzilla.redhat.com/show_bug.cgi?id=1831935
report
https://bugzilla.redhat.com/show_bug.cgi?id=1832331
report
https://bugzilla.redhat.com/show_bug.cgi?id=1833266
report
https://bugzilla.redhat.com/show_bug.cgi?id=1834264
report
https://bugzilla.redhat.com/show_bug.cgi?id=1834909
report
https://bugzilla.redhat.com/show_bug.cgi?id=1845211
report
https://bugzilla.redhat.com/show_bug.cgi?id=1845537

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

Summary

Fixed packages 9

Vulnerabilities 10

jQuery has a potential XSS vulnerability

Cross-Site Scripting (XSS) in jquery

Bootstrap Cross-site Scripting vulnerability

Bootstrap vulnerable to Cross-Site Scripting (XSS)

Bootstrap Cross-site Scripting vulnerability

XSS vulnerability that affects bootstrap

bootstrap Cross-site Scripting vulnerability

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

Bootstrap Vulnerable to Cross-Site Scripting

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) t…

References