Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
172
security advisoryarbitrary code executionimportantUbuntu 22.04 LTS USN-7569-1 critical: Dojo security issues
Several security issues were fixed in Dojo.. ========================================================================== Ubuntu Security Notice USN-7569-1 June 16, 2025 dojo vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Dojo. Software Description: - dojo: Modular JavaScript library Details: It was discovered that Dojo did not correctly handle DataGrids. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-15494) It was discovered that Dojo was vulnerable to prototype pollution. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-23450) Jonathan Leitschuh discovered that Dojo did not correctly sanitize certain inputs. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2019-10785, CVE-2020-4051) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS libjs-dojo-core 1.15.4+dfsg1-1ubuntu0.1 libjs-dojo-dijit 1.15.4+dfsg1-1ubuntu0.1 libjs-dojo-dojox 1.15.4+dfsg1-1ubuntu0.1 shrinksafe 1.15.4+dfsg1-1ubuntu0.1 Ubuntu 20.04 LTS libjs-dojo-core 1.15.0+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libjs-dojo-dijit 1.15.0+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro libjs-dojo-dojox 1.15.0+dfsg1-1ubuntu0.1~esm1 Available with Ubuntu Pro shrinksafe 1.15.0+dfsg1-1ubuntu0.1~esm1 Available with UbuntuPro Ubuntu 16.04 LTS libjs-dojo-core 1.10.4+dfsg-2ubuntu0.1~esm1 Available with Ubuntu Pro libjs-dojo-dijit 1.10.4+dfsg-2ubuntu0.1~esm1 Available with Ubuntu Pro libjs-dojo-dojox 1.10.4+dfsg-2ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7569-1 CVE-2018-15494, CVE-2019-10785, CVE-2020-4051, CVE-2021-23450 Package Information: https://launchpad.net/ubuntu/+source/dojo/1.15.4+dfsg1-1ubuntu0.1 . Explore the recent Ubuntu USN-7569-1 release that tackles vulnerabilities in Dojo and offers essential patches for enhanced security measures.. Ubuntu security, Dojo vulnerabilities, software update, code execution, XSS fix. . Severity: Critical. LinuxSecurity.com Team
Jun 16, 2025
•Critical
Ubuntu
203
security advisorycriticalsoftware updateMageia 8: MGASA-2023-0039 Critical Dojo XSS And Prototype Threats
Dijit Editor's LinkDialog plugin of dojo 1.14.0 to 1.14.7 is vulnerable to cross-site scripting (XSS) attacks. (CVE-2020-4051) Prototype pollution vulnerability via the setObject() function. (CVE-2021-23450) . MGASA-2023-0039 - Updated dojo packages fix security vulnerability Publication date: 07 Feb 2023 URL: https://advisories.mageia.org/MGASA-2023-0039.html Type: security Affected Mageia releases: 8 CVE: CVE-2020-4051, CVE-2021-23450 Dijit Editor's LinkDialog plugin of dojo 1.14.0 to 1.14.7 is vulnerable to cross-site scripting (XSS) attacks. (CVE-2020-4051) Prototype pollution vulnerability via the setObject() function. (CVE-2021-23450) References: - https://bugs.mageia.org/show_bug.cgi?id=31491 - https://github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6 - https://github.com/advisories/GHSA-m8gw-hjpr-rjv7 - https://www.cve.org/CVERecord?id=CVE-2020-4051 - https://www.cve.org/CVERecord?id=CVE-2021-23450 SRPMS: - 8/core/dojo-1.16.5-1.mga8 . Mageia 2023-0040 warns users about vulnerabilities in the CMS plugin regarding XSS attacks and prototype tampering threats. Keep informed on the patch details.. dojo Security, XSS Prevention, Mageia Advisory, Web Security, Software Update. . Severity: Critical. LinuxSecurity.com Team
Feb 07, 2023
•Critical
Mageia
197
security advisoryupdateDebianDebian 10 DLA-3289-1 Critical: Dojo XSS and Pollution Issues
Two vulnerabilities were found in dojo, a modular JavaScript toolkit, that could result in information disclosure. CVE-2020-4051 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3289-1
Jan 29, 2023
•Critical
Debian LTS
203
security advisoryupdatecross-site scriptingMageia: 2020-0126 Moderate: Dojo Cross-Site Scripting Threat
Updated dojo package fixes security vulnerability: dojox was vulnerable to Cross-site Scripting. This was due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them (CVE-2019-10785). . MGASA-2020-0126 - Updated dojo packages fix security vulnerability Publication date: 06 Mar 2020 URL: https://advisories.mageia.org/MGASA-2020-0126.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-10785 Updated dojo package fixes security vulnerability: dojox was vulnerable to Cross-site Scripting. This was due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them (CVE-2019-10785). References: - https://bugs.mageia.org/show_bug.cgi?id=26287 - https://lists.debian.org/debian-lts-announce/2020/02/msg00033.html - https://www.cve.org/CVERecord?id=CVE-2019-10785 SRPMS: - 7/core/dojo-1.14.5-1.mga7 . Fedora 2021-0312 updates nano software to address Denial of Service vulnerability. Release date: 15 Apr 2021.. Dojo Security Update, Mageia Advisory, Cross-Site Scripting, Security Patch. . Severity: Important. LinuxSecurity.com Team
Mar 06, 2020
•Important
Mageia
197
security advisorysecurity issuecriticalDebian 8: DLA-1492-1 Critical: Dojo String Injection Issue Fix
It was discovered that there was a string injection vulnerability in the "dojo" Javascript library. For Debian 8 "Jessie", this issue has been fixed in dojo version . Package : dojo Version : 1.10.2+dfsg-1+deb8u1 CVE ID : CVE-2018-15494 Debian Bug : #906540 It was discovered that there was a string injection vulnerability in the "dojo" Javascript library. For Debian 8 "Jessie", this issue has been fixed in dojo version 1.10.2+dfsg-1+deb8u1 by Abhijith PA. We recommend that you upgrade your dojo packages. Regards, - -- ,'`. : :' : Chris Lamb `. `'`
Sep 03, 2018
•Critical
Debian LTS
89
security advisoryfedoracriticalFedora Kdelibs3 Important DoS Code Execution Fix 2009-8046
This update fixes several security issues in the KDE 3 compatibility version of KHTML (CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-2537) which may lead to a denial of service or potentially even arbitrary code execution. In addition, the package was fixed to build with the latest version of automake.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-8046 2009-07-27 21:07:28 -------------------------------------------------------------------------------- Name : kdelibs3 Product : Fedora 11 Version : 3.5.10 Release : 13.fc11 URL : https://kde.org/ Summary : K Desktop Environment 3 - Libraries Description : Libraries for the K Desktop Environment 3: KDE Libraries included: kdecore (KDE core library), kdeui (user interface), kfm (file manager), khtmlw (HTML widget), kio (Input/Output, networking), kspell (spelling checker), jscript (javascript), kab (addressbook), kimgio (image manipulation). -------------------------------------------------------------------------------- Update Information: This update fixes several security issues in the KDE 3 compatibility version of KHTML (CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-2537) which may lead to a denial of service or potentially even arbitrary code execution. In addition, the package was fixed to build with the latest version of automake. -------------------------------------------------------------------------------- ChangeLog: * Sun Jul 26 2009 Kevin Kofler - 3.5.10-13 - fix CVE-2009-2537 - select length DoS - fix CVE-2009-1725 - crash, possible ACE in numeric character references - fix CVE-2009-1690 - crash, possible ACE in KHTML ( . Addresses major vulnerabilities in KDE kdelibs3 for Fedora 11, mitigating potential DoS attacks and the risk of code execution. Ensure you update promptly for enhanced security.. KDE Libraries,Fedora Update,kdelibs3,security patch,code execution threat. .Severity: Critical. LinuxSecurity.com Team
Jul 28, 2009
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!