Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
172
security advisoryupdateXSSUbuntu 18.04 LTS USN-7622-1: jQuery security issues and XSS risks
Several security issues were fixed in jQuery.. ========================================================================== Ubuntu Security Notice USN-7622-1 July 08, 2025 jquery vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in jQuery. Software Description: - jquery: JavaScript library for dynamic web applications Details: It was discovered that jQuery did not correctly handle HTML tags. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 14.04 LTS. (CVE-2012-6708) It was discovered that jQuery did not correctly handle unsanitized source objects due to prototype pollution. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. (CVE-2019-11358) Masato Kinugawa discovered that jQuery did not correctly sanitize certain HTML elements. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-11022) Masato Kinugawa discovered that jQuery did not correctly sanitize certain HTML elements. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-11023) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS libjs-jquery 3.2.1-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS libjs-jquery 1.11.3+dfsg-4ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 14.04 LTS libjs-jquery 1.7.2+dfsg-2ubuntu1+esm1 Available with Ubuntu Pro In general, a standard system updatewill make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7622-1 CVE-2012-6708, CVE-2019-11358, CVE-2020-11022, CVE-2020-11023 . The Ubuntu Security Notice USN-7623-1 addresses critical vulnerabilities found in PHP, particularly concerning remote code execution risks in earlier LTS releases.. Ubuntu Security, jQuery vulnerabilities, Cross-Site Scripting, package update. . Severity: Critical. LinuxSecurity.com Team
Jul 08, 2025
•Critical
Ubuntu
172
security advisorysoftware updateremote code executionUbuntu 20.04 LTS USN-7246-1: jQuery Remote Code Execution Fix
Several security issues were fixed in jquery.. ========================================================================== Ubuntu Security Notice USN-7246-1 January 30, 2025 jquery vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: Several security issues were fixed in jquery. Software Description: - jquery: JavaScript library for dynamic web applications Details: It was discovered that jQuery incorrectly handled parsing untrusted HTML. A remote attacker could possibly use this issue to execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS libjs-jquery 3.3.1~dfsg-3ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7246-1 CVE-2020-11022, CVE-2020-11023 Package Information: https://launchpad.net/ubuntu/+source/jquery/3.3.1~dfsg-3ubuntu0.1 . A number of security vulnerabilities in jQuery have been addressed. Ensure you update your Ubuntu installation promptly for enhanced security measures.. Ubuntu Security, jQuery Update, Remote Code Alert, Software Vulnerability. . Severity: Important. LinuxSecurity.com Team
Jan 30, 2025
•Important
Ubuntu
197
security advisorypackage upgradeversion updateDebian Jessie: DLA-1777-2 Critical: jquery Regression Issue Resolved
The minified jquery library was broken in version 1.7.2+dfsg-3.2+deb8u6 due to an error during the build. This problem has now been fixed in version 1.7.2+dfsg-3.2+deb8u7 . Package : jquery Version : 1.7.2+dfsg-3.2+deb8u7 Debian Bug : #928827 The minified jquery library was broken in version 1.7.2+dfsg-3.2+deb8u6 due to an error during the build. This problem has now been fixed in version 1.7.2+dfsg-3.2+deb8u7 For Debian 8 "Jessie", this problem has been fixed in version 1.7.2+dfsg-3.2+deb8u7. We recommend that you upgrade your jquery packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Revise jquery module to address the issue introduced in version 1.7.2+dfsg-3.2+deb8u7 stemming from a compilation problem.. jquery Maintenance, Debian Upgrade, Security Fix. . Severity: Critical. LinuxSecurity.com Team
May 17, 2019
•Critical
Debian LTS
197
security advisorydebianpackage updateDebian 8: DLA-1777-1 Moderate: jQuery Object Prototype Pollution
jQuery mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. For additional information, please refer to the upstream advisory at . Package : jquery Version : 1.7.2+dfsg-3.2+deb8u6 CVE ID : CVE-2019-11358 jQuery mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. For additional information, please refer to the upstream advisory at https:// . For Debian 8 "Jessie", this problem has been fixed in version 1.7.2+dfsg-3.2+deb8u6. We recommend that you upgrade your jquery packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . The recent jQuery security patch addresses an object prototype vulnerability in Debian 8. Ensure you are using version 1.7.2+dfsg-3.2+deb8u6 at your earliest convenience.. jQuery Security Update, Object Prototype Pollution, Debian 8 Update, Security Advisory, Package Update. . LinuxSecurity.com Team
May 06, 2019
Debian LTS
89
security advisoryFedoracross-site scriptingFedora 26: Security Advisory for python-XStatic-jquery-ui Critical Threat
Security fix for `CVE-2016-7103 `. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-1bf5a0ce01 2017-11-22 01:03:54.843891 --------------------------------------------------------------------------------Name : python-XStatic-jquery-ui Product : Fedora 26 Version : 1.12.0.1 Release : 2.fc26 URL : https://jqueryui.com/ Summary : jquery-ui (XStatic packaging standard) Description : JavaScript library packaged for setuptools (easy_install) / pip. This package is intended to be used by any project that needs these files. It intentionally does not provide any extra code except some metadata nor has any extra requirements. --------------------------------------------------------------------------------Update Information: Security fix for `CVE-2016-7103 ` --------------------------------------------------------------------------------References: [ 1 ] Bug #1360286 - CVE-2016-7103 jquery-ui: cross-site scripting in dialog closeText https://bugzilla.redhat.com/show_bug.cgi?id=1360286 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade python-XStatic-jquery-ui' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Nov 22, 2017
•Critical
Fedora
89
security advisorycriticalFedoraFedora 21: 2015-bb714cae5f Critical Open Redirect In drupal7-jquery_update
See [jQuery Update - Less Critical - Open Redirect - SA-CONTRIB-2015-123]() Changes since 7.x-2.5 (3 commits): * Updating overlay code to match core * Issue #2466329 by hanoii: Update 1.7 to 1.7.2 * Issue #1546668 by sergey.semashko, RobLoach: Update to jQuery 1.8.3. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-bb714cae5f 2015-10-23 11:54:19.319959 -------------------------------------------------------------------------------- Name : drupal7-jquery_update Product : Fedora 21 Version : 2.6 Release : 1.fc21 URL : https:// Summary : Upgrades the version of jQuery in Drupal core to a newer version of jQuery Description : Upgrades the version of jQuery in Drupal core to a newer version of jQuery. This package provides the following Drupal module: * jquery_update -------------------------------------------------------------------------------- Update Information: See [jQuery Update - Less Critical - Open Redirect - SA- CONTRIB-2015-123](https://) Changes since 7.x-2.5 (3 commits): * Updating overlay code to match core * Issue #2466329 by hanoii: Update 1.7 to 1.7.2 * Issue #1546668 by sergey.semashko, RobLoach: Update to jQuery 1.8.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1222725 - drupal7-jquery_update-2.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1222725 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update drupal7-jquery_update' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Oct 23, 2015
•Critical
Fedora
172
security advisorymoderatecross-site scriptingUbuntu 11.10: USN-1722-1 Moderate: jQuery Information Exposure
jQuery could be made to expose sensitive information over the network.. =========================================================================Ubuntu Security Notice USN-1722-1 February 13, 2013 jquery vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.10 - Ubuntu 10.04 LTS Summary: jQuery could be made to expose sensitive information over the network. Software Description: - jquery: JavaScript library for dynamic web applications Details: It was discovered that jQuery incorrectly handled selecting elements using location.hash, resulting in a possible cross-site scripting (XSS) issue. With cross-site scripting vulnerabilities, if a user were tricked into viewing a specially crafted page, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: libjs-jquery 1.6.2-1ubuntu2.2 Ubuntu 10.04 LTS: libjs-jquery 1.3.3-2ubuntu1.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1722-1 CVE-2011-4969 Package Information: https://launchpad.net/ubuntu/+source/jquery/1.6.2-1ubuntu2.2 https://launchpad.net/ubuntu/+source/jquery/1.3.3-2ubuntu1.2 . jQuery flaws within Ubuntu systems may result in data leaks across the network. Ensure to update swiftly to maintain security.. Ubuntu Security,jQuery Issue,Cross-Site Scripting. . Severity: Important. LinuxSecurity.com Team
Feb 13, 2013
•Important
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!