ALSA-2021:1846

See a problem?
Please try reporting it to the source first.

Source

https://errata.almalinux.org/8/ALSA-2021-1846.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1846.json

JSON Data

https://api.osv.dev/v1/vulns/ALSA-2021:1846

Related

CVE-2020-11023

Published

2021-05-18T06:14:07Z

Modified

2021-12-15T23:07:56Z

Summary

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

Details

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution (CVE-2020-11023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8 / bind-dyndb-ldap

Package

Name: bind-dyndb-ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

11.6-2.module_el8.5.0+2603+92118e57

AlmaLinux:8 / custodia

Package

Name: custodia

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.6.0-3.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / custodia

Package

Name: custodia

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.6.0-3.module_el8.5.0+2603+92118e57

AlmaLinux:8 / opendnssec

Package

Name: opendnssec

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.7-1.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / opendnssec

Package

Name: opendnssec

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.7-1.module_el8.5.0+2603+92118e57

AlmaLinux:8 / python3-custodia

Package

Name: python3-custodia

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.6.0-3.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / python3-custodia

Package

Name: python3-custodia

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.6.0-3.module_el8.5.0+2603+92118e57

AlmaLinux:8 / python3-jwcrypto

Package

Name: python3-jwcrypto

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.0-1.module_el8.5.0+2603+92118e57

AlmaLinux:8 / python3-jwcrypto

Package

Name: python3-jwcrypto

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.0-1.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / python3-jwcrypto

Package

Name: python3-jwcrypto

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.0-1.module_el8.6.0+2737+7e73ea90

AlmaLinux:8 / python3-kdcproxy

Package

Name: python3-kdcproxy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.4-5.module_el8.5.0+2603+92118e57

AlmaLinux:8 / python3-kdcproxy

Package

Name: python3-kdcproxy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.4-5.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / python3-pyusb

Package

Name: python3-pyusb

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.0-9.module_el8.5.0+2603+92118e57

AlmaLinux:8 / python3-pyusb

Package

Name: python3-pyusb

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.0-9.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / python3-pyusb

Package

Name: python3-pyusb

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.0-9.module_el8.6.0+2737+7e73ea90

AlmaLinux:8 / python3-qrcode

Package

Name: python3-qrcode

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.1-12.module_el8.5.0+2603+92118e57

AlmaLinux:8 / python3-qrcode

Package

Name: python3-qrcode

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.1-12.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / python3-qrcode

Package

Name: python3-qrcode

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.1-12.module_el8.6.0+2737+7e73ea90

AlmaLinux:8 / python3-qrcode-core

Package

Name: python3-qrcode-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.1-12.module_el8.6.0+2737+7e73ea90

AlmaLinux:8 / python3-qrcode-core

Package

Name: python3-qrcode-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.1-12.module_el8.5.0+2603+92118e57

AlmaLinux:8 / python3-qrcode-core

Package

Name: python3-qrcode-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.1-12.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / python3-yubico

Package

Name: python3-yubico

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.2-9.module_el8.6.0+2737+7e73ea90

AlmaLinux:8 / python3-yubico

Package

Name: python3-yubico

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.2-9.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / python3-yubico

Package

Name: python3-yubico

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.2-9.module_el8.5.0+2603+92118e57

AlmaLinux:8 / softhsm

Package

Name: softhsm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.0-5.module_el8.5.0+2603+92118e57

AlmaLinux:8 / softhsm

Package

Name: softhsm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.0-5.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / softhsm-devel

Package

Name: softhsm-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.0-5.module_el8.6.0+2881+2f24dc92

AlmaLinux:8 / softhsm-devel

Package

Name: softhsm-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.0-5.module_el8.5.0+2603+92118e57