Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 24: 2016-06e8a3f776 Critical: js-jquery1 XSS Attack Mitigation

fedora
Calendar Grey December 29, 2016
Dist Fedora Esm H88
Fedora 24 releases a jQuery 1 security patch to combat XSS vulnerabilities featuring a backported fix and the newest stable edition.
Update to latest jquery1 stable, with backport fix for XSS vulnerability.)

Summary

jQuery is a fast, small, and feature-rich JavaScript library. It makes things

like HTML document traversal and manipulation, event handling, animation, and

Ajax much simpler with an easy-to-use API that works across a multitude of

browsers. With a combination of versatility and extensibility, jQuery has

changed the way that millions of people write JavaScript.

Update Information:

Update to latest jquery1 stable, with backport fix for XSS vulnerability.)

Topics%20covered

Topics Covered

security advisory fedora update critical xss javascript

Change Log

References


[ 1 ] Bug #1307668 - js-jquery1: FTBFS in F24 https://bugzilla.redhat.com/show_bug.cgi?id=1307668 [ 2 ] Bug #1257589 - Upgrade js-jquery1 to 1.11.3 https://bugzilla.redhat.com/show_bug.cgi?id=1257589 [ 3 ] Bug #1399548 - js-jquery1: js-jquery: Cross-site scripting via cross-domain ajax requests [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1399548 [ 4 ] Bug #1399547 - js-jquery1: js-jquery: Cross-site scripting via cross-domain ajax requests [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1399547

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade js-jquery1' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: js-jquery1
Product: Fedora 24
Version: 1.12.4
Release: 2.fc24
URL: https://jquery.com/
Summary: JavaScript DOM manipulation, event handling, and AJAX library

Topics%20covered

Topics Covered

security advisory fedora update critical xss javascript

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here