Summary
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
The following packages have been upgraded to a later upstream version: pcs (0.10.10). (BZ#1935594)
Security Fix(es):
* jquery: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces (CVE-2020-7656)
* jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | pcs | 0:0.10.10-4.el8 |
Vulnerabilities 3
-
Medium 6.9
Potential XSS vulnerability in jQuery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…
KEV Jan 23, 2025 -
Medium 6.1
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…
-
Medium 6.1CVE-2020-7656 Public exploit
Cross-Site Scripting in jquery
jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1290830
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1432097
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1678273
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1690419
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1720221
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1759995
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1841019
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1850004
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1850119
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1854238
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1872378
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1885293
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1885302
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1896458
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1909901
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1922996
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1927384
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1927394
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1930886
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1935594
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1984901
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1991654
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1992668
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1998454