Описание
ELSA-2022-9177: jquery-ui security update (IMPORTANT)
[1.10.4.custom-4.0.1]
- Backport jQuery CVE-2020-11022 and CVE-2020-11023 fixes to bundled jQuery v1.10.2 [Orabug: 33869588]
[1.10.4.custom-4]
- removed %%defattr from specfile
- removed Group from specfile
- removed BuildRoot from specfiles
- Tue May 10 2016 Grant Gainey 1.10.4.custom-3
- jquery-ui: build on openSUSE
[1.10.4.custom-2]
- fix jquery-ui source url
[1.10.4.custom-1]
- initial jquery-ui build
Обновленные пакеты
Oracle Linux 7
Oracle Linux x86_64
jquery-ui
1.10.4.custom-4.0.1.el7
Связанные CVE
Связанные уязвимости
ELSA-2020-4847: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update (MODERATE)
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.