RHSA-2025:1515: Moderate: idm:DL1 security update
Published Feb 17, 2025
·Updated
Moderate: idm:DL1 security update
Other sources
Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
55 affected componentsFixes available
Red Hat Red Hat Enterprise Linux Server - AUS
redhat/bind-dyndb-ldap<11.2-3.module+el8.2.0+21753+7109ce90.3
11.2-3.module+el8.2.0+21753+7109ce90.3
redhat/custodia<0.6.0-3.module+el8.1.0+4098+f286395e
0.6.0-3.module+el8.1.0+4098+f286395e
redhat/ipa<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-healthcheck<0.4-4.module+el8.2.0+5489+95477d9f
0.4-4.module+el8.2.0+5489+95477d9f
redhat/ipa-idoverride-memberof<0.0.4-6.module+el8.1.0+4098+f286395e
0.0.4-6.module+el8.1.0+4098+f286395e
redhat/opendnssec<1.4.14-1.module+el8.1.0+4098+f286395e
1.4.14-1.module+el8.1.0+4098+f286395e
redhat/python-jwcrypto<0.5.0-1.module+el8.1.0+4098+f286395e
0.5.0-1.module+el8.1.0+4098+f286395e
redhat/python-kdcproxy<0.4-5.module+el8.2.0+4691+a05b2456
0.4-5.module+el8.2.0+4691+a05b2456
redhat/python-qrcode<5.1-12.module+el8.1.0+4098+f286395e
5.1-12.module+el8.1.0+4098+f286395e
redhat/python-yubico<1.3.2-9.module+el8.1.0+4098+f286395e
1.3.2-9.module+el8.1.0+4098+f286395e
redhat/pyusb<1.0.0-9.module+el8.1.0+4098+f286395e
1.0.0-9.module+el8.1.0+4098+f286395e
redhat/slapi-nis<0.56.3-3.module+el8.2.0+10782+8facb0b2
0.56.3-3.module+el8.2.0+10782+8facb0b2
redhat/softhsm<2.4.0-4.module+el8.2.0+5779+a38c524f
2.4.0-4.module+el8.2.0+5779+a38c524f
redhat/bind-dyndb-ldap<11.2-3.module+el8.2.0+21753+7109ce90.3
11.2-3.module+el8.2.0+21753+7109ce90.3
redhat/bind-dyndb-ldap-debuginfo<11.2-3.module+el8.2.0+21753+7109ce90.3
11.2-3.module+el8.2.0+21753+7109ce90.3
redhat/bind-dyndb-ldap-debugsource<11.2-3.module+el8.2.0+21753+7109ce90.3
11.2-3.module+el8.2.0+21753+7109ce90.3
redhat/custodia<0.6.0-3.module+el8.1.0+4098+f286395e
0.6.0-3.module+el8.1.0+4098+f286395e
redhat/ipa-client<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-client-common<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-client-debuginfo<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-client-samba<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-common<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-debuginfo<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-debugsource<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-healthcheck<0.4-4.module+el8.2.0+5489+95477d9f
0.4-4.module+el8.2.0+5489+95477d9f
redhat/ipa-healthcheck-core<0.4-4.module+el8.2.0+5489+95477d9f
0.4-4.module+el8.2.0+5489+95477d9f
redhat/ipa-idoverride-memberof-plugin<0.0.4-6.module+el8.1.0+4098+f286395e
0.0.4-6.module+el8.1.0+4098+f286395e
redhat/ipa-python-compat<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-server<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-server-common<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-server-debuginfo<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-server-dns<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-server-trust-ad<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/ipa-server-trust-ad-debuginfo<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/opendnssec<1.4.14-1.module+el8.1.0+4098+f286395e
1.4.14-1.module+el8.1.0+4098+f286395e
redhat/opendnssec-debuginfo<1.4.14-1.module+el8.1.0+4098+f286395e
1.4.14-1.module+el8.1.0+4098+f286395e
redhat/opendnssec-debugsource<1.4.14-1.module+el8.1.0+4098+f286395e
1.4.14-1.module+el8.1.0+4098+f286395e
redhat/python3-custodia<0.6.0-3.module+el8.1.0+4098+f286395e
0.6.0-3.module+el8.1.0+4098+f286395e
redhat/python3-ipaclient<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/python3-ipalib<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/python3-ipaserver<4.8.4-14.module+el8.2.0+22854+05081d30.5
4.8.4-14.module+el8.2.0+22854+05081d30.5
redhat/python3-jwcrypto<0.5.0-1.module+el8.1.0+4098+f286395e
0.5.0-1.module+el8.1.0+4098+f286395e
redhat/python3-kdcproxy<0.4-5.module+el8.2.0+4691+a05b2456
0.4-5.module+el8.2.0+4691+a05b2456
redhat/python3-pyusb<1.0.0-9.module+el8.1.0+4098+f286395e
1.0.0-9.module+el8.1.0+4098+f286395e
redhat/python3-qrcode<5.1-12.module+el8.1.0+4098+f286395e
5.1-12.module+el8.1.0+4098+f286395e
redhat/python3-qrcode-core<5.1-12.module+el8.1.0+4098+f286395e
5.1-12.module+el8.1.0+4098+f286395e
redhat/python3-yubico<1.3.2-9.module+el8.1.0+4098+f286395e
1.3.2-9.module+el8.1.0+4098+f286395e
redhat/slapi-nis<0.56.3-3.module+el8.2.0+10782+8facb0b2
0.56.3-3.module+el8.2.0+10782+8facb0b2
redhat/slapi-nis-debuginfo<0.56.3-3.module+el8.2.0+10782+8facb0b2
0.56.3-3.module+el8.2.0+10782+8facb0b2
redhat/slapi-nis-debugsource<0.56.3-3.module+el8.2.0+10782+8facb0b2
0.56.3-3.module+el8.2.0+10782+8facb0b2
redhat/softhsm<2.4.0-4.module+el8.2.0+5779+a38c524f
2.4.0-4.module+el8.2.0+5779+a38c524f
redhat/softhsm-debuginfo<2.4.0-4.module+el8.2.0+5779+a38c524f
2.4.0-4.module+el8.2.0+5779+a38c524f
redhat/softhsm-debugsource<2.4.0-4.module+el8.2.0+5779+a38c524f
2.4.0-4.module+el8.2.0+5779+a38c524f
redhat/softhsm-devel<2.4.0-4.module+el8.2.0+5779+a38c524f
2.4.0-4.module+el8.2.0+5779+a38c524f
Remediation
Event History
Feb 17, 2025
Advisory Published
via Red Hat·12:00 AM
Frequently Asked Questions
1
What are the details of the vulnerability RHSA-2025:1515?
RHSA-2025:1515 addresses a moderate security vulnerability in Red Hat Identity Management related to potential untrusted code execution via jQuery.
2
How do I fix RHSA-2025:1515?
To fix RHSA-2025:1515, update the affected packages to the versions specified in the Red Hat advisory.
3
What is the severity of RHSA-2025:1515?
The severity of RHSA-2025:1515 is classified as moderate.
4
Which software is affected by RHSA-2025:1515?
RHSA-2025:1515 affects several packages related to Red Hat Enterprise Linux, including idm, ipa, and others.
5
Is there a workaround for RHSA-2025:1515?
There are no specific workarounds for RHSA-2025:1515; applying the recommended updates is advised.