RLSA-2021:4142

Import Source

https://storage.googleapis.com/resf-osv-data/RLSA-2021:4142.json

Related

• CVE-2019-11358
• CVE-2020-11023
• CVE-2020-7656

Published

2021-11-09T08:21:49Z

Modified

2023-02-02T14:12:29.144005Z

Summary

Low: pcs security, bug fix, and enhancement update

Details

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

The following packages have been upgraded to a later upstream version: pcs (0.10.10). (BZ#1935594)

Security Fix(es):

• jquery: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces (CVE-2020-7656)

• jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

References

• https://errata.rockylinux.org/RLSA-2021:4142
• https://bugzilla.redhat.com/show_bug.cgi?id=1290830
• https://bugzilla.redhat.com/show_bug.cgi?id=1432097
• https://bugzilla.redhat.com/show_bug.cgi?id=1678273
• https://bugzilla.redhat.com/show_bug.cgi?id=1690419
• https://bugzilla.redhat.com/show_bug.cgi?id=1720221
• https://bugzilla.redhat.com/show_bug.cgi?id=1759995
• https://bugzilla.redhat.com/show_bug.cgi?id=1841019
• https://bugzilla.redhat.com/show_bug.cgi?id=1850004
• https://bugzilla.redhat.com/show_bug.cgi?id=1850119
• https://bugzilla.redhat.com/show_bug.cgi?id=1854238
• https://bugzilla.redhat.com/show_bug.cgi?id=1872378
• https://bugzilla.redhat.com/show_bug.cgi?id=1885293
• https://bugzilla.redhat.com/show_bug.cgi?id=1885302
• https://bugzilla.redhat.com/show_bug.cgi?id=1896458
• https://bugzilla.redhat.com/show_bug.cgi?id=1909901
• https://bugzilla.redhat.com/show_bug.cgi?id=1922996
• https://bugzilla.redhat.com/show_bug.cgi?id=1927384
• https://bugzilla.redhat.com/show_bug.cgi?id=1927394
• https://bugzilla.redhat.com/show_bug.cgi?id=1930886
• https://bugzilla.redhat.com/show_bug.cgi?id=1935594
• https://bugzilla.redhat.com/show_bug.cgi?id=1984901
• https://bugzilla.redhat.com/show_bug.cgi?id=1991654
• https://bugzilla.redhat.com/show_bug.cgi?id=1992668
• https://bugzilla.redhat.com/show_bug.cgi?id=1998454