RHSA-2020:4670: Security update for 29 packages

RHSA-2020:4670, released November 4, 2020, fixes 10 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

6.1

Base score, 0 to 10

Highest EPSS

0.9922

99th percentile

Priority of the 10 CVEs

Patch now 0
                                Urgent 0
                                High 0
                                Routine 10

Fixed package versions

Product	Release	Fixed in
bind-dyndb-ldap	RHEL 8	0:11.3-1.module+el8.3.0+6993+104f8db0
custodia	RHEL 8	0:0.6.0-3.module+el8.1.0+4098+f286395e
ipa-client	RHEL 8	0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-common	RHEL 8	0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-epn	RHEL 8	0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-samba	RHEL 8	0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-common	RHEL 8	0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-healthcheck	RHEL 8	0:0.4-6.module+el8.3.0+7710+e2408ce4
ipa-healthcheck-core	RHEL 8	0:0.4-6.module+el8.3.0+7711+c4441980
ipa-python-compat	RHEL 8	0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-selinux	RHEL 8	0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-server	RHEL 8	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-common	RHEL 8	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-dns	RHEL 8	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-trust-ad	RHEL 8	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
opendnssec	RHEL 8	0:2.1.6-2.module+el8.3.0+6580+328a3362
python3-custodia	RHEL 8	0:0.6.0-3.module+el8.1.0+4098+f286395e
python3-ipaclient	RHEL 8	0:4.8.7-12.module+el8.3.0+8223+6212645f
python3-ipalib	RHEL 8	0:4.8.7-12.module+el8.3.0+8223+6212645f
python3-ipaserver	RHEL 8	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
python3-jwcrypto	RHEL 8	0:0.5.0-1.module+el8.1.0+4107+4a66eb87
python3-kdcproxy	RHEL 8	0:0.4-5.module+el8.2.0+4691+a05b2456
python3-pyusb	RHEL 8	0:1.0.0-9.module+el8.1.0+4107+4a66eb87
python3-qrcode	RHEL 8	0:5.1-12.module+el8.1.0+4107+4a66eb87
python3-qrcode-core	RHEL 8	0:5.1-12.module+el8.1.0+4107+4a66eb87
python3-yubico	RHEL 8	0:1.3.2-9.module+el8.1.0+4107+4a66eb87
slapi-nis	RHEL 8	0:0.56.5-4.module+el8.3.0+8222+c1bff54a
softhsm	RHEL 8	0:2.6.0-3.module+el8.3.0+6909+fb33717d
softhsm-devel	RHEL 8	0:2.6.0-3.module+el8.3.0+6909+fb33717d

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Routine	CVE-2020-11022	libjs-jquery: In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to...	6.1	0.9922	None reported
Routine	CVE-2019-11358	apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...	6.1	0.8682	None reported
Routine	CVE-2015-9251	apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...	6.1	0.2973	None reported
Routine	CVE-2019-8331	apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...	6.1	0.1640	None reported
Routine	CVE-2018-14040	apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...	6.1	0.0414	None reported
Routine	CVE-2016-10735	fonts-glyphicons-halflings: In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS ispossible in the data-target attribute, a differ...	6.1	0.0404	None reported
Routine	CVE-2018-14042	apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...	6.1	0.0401	None reported
Routine	CVE-2018-20677	bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo...	6.1	0.0398	None reported
Routine	CVE-2018-20676	bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo...	6.1	0.0384	None reported
Routine	CVE-2020-1722	bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo...	5.3	0.0107	None reported

Also fixes CVE-2020-11022

RHSA-2020:4847
apache-commons-collections, apache-commons-lang, apache-commons-net and 44 more on RHEL 8
ELSA-2020-4847
apache-commons-collections, apache-commons-lang, apache-commons-net and 44 more on ol 8
libjs-jquery 3.2.1-1ubuntu0.1~esm1
libjs-jquery on Ubuntu 18.04.6 LTS (bionic)
libjs-jquery 3.3.1~dfsg-3ubuntu0.1
libjs-jquery on Ubuntu 20.04 LTS (focal)
ELSA-2020-4670
bind-dyndb-ldap, custodia, ipa-client and 26 more on ol 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2020:4670

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/rhsa-2020-4670">RHSA-2020:4670 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.