-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

====================================================================                   Red Hat Security Advisory

Synopsis:          Moderate: python-XStatic-jQuery security update
Advisory ID:       RHSA-2020:1325-01
Product:           Red Hat OpenStack Platform
Advisory URL:      https://access.redhat.com/errata/RHSA-2020:1325
Issue date:        2020-04-06
CVE Names:         CVE-2019-11358 
====================================================================
1. Summary:

An update for python-XStatic-jQuery is now available for Red Hat OpenStack
Platform 15 (Stein).

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat OpenStack Platform 15.0 - noarch

3. Description:

python-XStatic-jQuery is the jQuery javascript library packaged for
Python's setuptools

Security Fix(es):

* prototype pollution in object's prototype leading to denial of service or
remote code execution or property injection (CVE-2019-11358)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

1701972 - CVE-2019-11358 js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection

6. Package List:

Red Hat OpenStack Platform 15.0:

Source:
python-XStatic-jQuery-3.4.1.0-1.el8ost.src.rpm

noarch:
python3-XStatic-jQuery-3.4.1.0-1.el8ost.noarch.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2019-11358
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2020 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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vjUw
-----END PGP SIGNATURE-----

--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

RedHat: RHSA-2020-1325:01 Moderate: python-XStatic-jQuery security update

An update for python-XStatic-jQuery is now available for Red Hat OpenStack Platform 15 (Stein)

Summary

python-XStatic-jQuery is the jQuery javascript library packaged for Python's setuptools
Security Fix(es):
* prototype pollution in object's prototype leading to denial of service or remote code execution or property injection (CVE-2019-11358)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.



Summary


Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258

References

https://access.redhat.com/security/cve/CVE-2019-11358 https://access.redhat.com/security/updates/classification/#moderate

Package List

Red Hat OpenStack Platform 15.0:
Source: python-XStatic-jQuery-3.4.1.0-1.el8ost.src.rpm
noarch: python3-XStatic-jQuery-3.4.1.0-1.el8ost.noarch.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Severity
Advisory ID: RHSA-2020:1325-01
Product: Red Hat OpenStack Platform
Advisory URL: https://access.redhat.com/errata/RHSA-2020:1325
Issued Date: : 2020-04-06
CVE Names: CVE-2019-11358

Topic

An update for python-XStatic-jQuery is now available for Red Hat OpenStackPlatform 15 (Stein).Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.


Topic


 

Relevant Releases Architectures

Red Hat OpenStack Platform 15.0 - noarch


Bugs Fixed

1701972 - CVE-2019-11358 js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection


Related News