Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

2021-05-1806:14:07

errata.almalinux.org

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.019 Low

EPSS

Percentile

88.4%

JSON

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution (CVE-2020-11023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchpython3-kdcproxy< 0.4-5.module_el8.5.0+2603+92118e57python3-kdcproxy-0.4-5.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux8noarchpython3-custodia< 0.6.0-3.module_el8.5.0+2603+92118e57python3-custodia-0.6.0-3.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux8x86_64softhsm< 2.6.0-5.module_el8.5.0+2603+92118e57softhsm-2.6.0-5.module_el8.5.0+2603+92118e57.x86_64.rpm
almalinux8noarchpython3-qrcode-core< 5.1-12.module_el8.5.0+2603+92118e57python3-qrcode-core-5.1-12.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux8noarchpython3-pyusb< 1.0.0-9.module_el8.5.0+2603+92118e57python3-pyusb-1.0.0-9.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux8x86_64opendnssec< 2.1.7-1.module_el8.5.0+2603+92118e57opendnssec-2.1.7-1.module_el8.5.0+2603+92118e57.x86_64.rpm
almalinux8noarchpython3-jwcrypto< 0.5.0-1.module_el8.5.0+2603+92118e57python3-jwcrypto-0.5.0-1.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux8noarchpython3-qrcode< 5.1-12.module_el8.5.0+2603+92118e57python3-qrcode-5.1-12.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux8x86_64softhsm-devel< 2.6.0-5.module_el8.5.0+2603+92118e57softhsm-devel-2.6.0-5.module_el8.5.0+2603+92118e57.x86_64.rpm
almalinux8x86_64bind-dyndb-ldap< 11.6-2.module_el8.5.0+2603+92118e57bind-dyndb-ldap-11.6-2.module_el8.5.0+2603+92118e57.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	python3-kdcproxy	< 0.4-5.module_el8.5.0+2603+92118e57	python3-kdcproxy-0.4-5.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux	8	noarch	python3-custodia	< 0.6.0-3.module_el8.5.0+2603+92118e57	python3-custodia-0.6.0-3.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux	8	x86_64	softhsm	< 2.6.0-5.module_el8.5.0+2603+92118e57	softhsm-2.6.0-5.module_el8.5.0+2603+92118e57.x86_64.rpm
almalinux	8	noarch	python3-qrcode-core	< 5.1-12.module_el8.5.0+2603+92118e57	python3-qrcode-core-5.1-12.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux	8	noarch	python3-pyusb	< 1.0.0-9.module_el8.5.0+2603+92118e57	python3-pyusb-1.0.0-9.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux	8	x86_64	opendnssec	< 2.1.7-1.module_el8.5.0+2603+92118e57	opendnssec-2.1.7-1.module_el8.5.0+2603+92118e57.x86_64.rpm
almalinux	8	noarch	python3-jwcrypto	< 0.5.0-1.module_el8.5.0+2603+92118e57	python3-jwcrypto-0.5.0-1.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux	8	noarch	python3-qrcode	< 5.1-12.module_el8.5.0+2603+92118e57	python3-qrcode-5.1-12.module_el8.5.0+2603+92118e57.noarch.rpm
almalinux	8	x86_64	softhsm-devel	< 2.6.0-5.module_el8.5.0+2603+92118e57	softhsm-devel-2.6.0-5.module_el8.5.0+2603+92118e57.x86_64.rpm
almalinux	8	x86_64	bind-dyndb-ldap	< 11.6-2.module_el8.5.0+2603+92118e57	bind-dyndb-ldap-11.6-2.module_el8.5.0+2603+92118e57.x86_64.rpm