(RHSA-2016:2932) Low: python-XStatic-jquery-ui security update

2016-12-0816:02:28

access.redhat.com

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.1%

JSON

jquery-ui javascript library packaged for setuptools (easy_install) / pip.

The following packages have been upgraded to a newer upstream version: python-XStatic-jquery-ui (1.12.0.1). (BZ#1371011)

Security Fix(es):

It was found that a parameter of the dialog box feature of jQuery UI was vulnerable to cross site scripting. An attacker could use this flaw to execute a malicious script via the dialog box when it was displayed to a user. (CVE-2016-7103)

OSVersionArchitecturePackageVersionFilename
RedHat7noarchpython-xstatic-jquery-ui< 1.12.0.1-1.el7ostpython-XStatic-jquery-ui-1.12.0.1-1.el7ost.noarch.rpm