Ubuntu alert USN-7246-1 (jquery)

From:
             
 
Marc Deslauriers <marc.deslauriers@canonical.com>
To:
             
 
"ubuntu-security-announce@lists.ubuntu.com" <ubuntu-security-announce@lists.ubuntu.com>
Subject:
             
 
[USN-7246-1] jQuery vulnerabilities
Date:
             
 
Thu, 30 Jan 2025 11:07:15 -0500
Message-ID:
             
 
<2b9c40f5-92e1-4681-9002-609b63962436@canonical.com>
==========================================================================
Ubuntu Security Notice USN-7246-1
January 30, 2025

jquery vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS

Summary:

Several security issues were fixed in jquery.

Software Description:
- jquery: JavaScript library for dynamic web applications

Details:

It was discovered that jQuery incorrectly handled parsing untrusted HTML. A
remote attacker could possibly use this issue to execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
   libjs-jquery                    3.3.1~dfsg-3ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-7246-1
   CVE-2020-11022, CVE-2020-11023

Package Information:
   https://launchpad.net/ubuntu/+source/jquery/3.3.1~dfsg-3u...



Attachment: OpenPGP_signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

wsF5BAABCAAjFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAmebo7MFAwAAAAAACgkQZWnYVadEvpPN
ixAAorbTxHDHflUA0tJH09aff/EGyNvMQDhyltfI/llFs87pnaXmUjd90QpzO5uk4IUd3To9ZRwd
3yFc9227cYMcjbGXL/URYKkpRMTd4YVnzukz+gWPrwFWtMwZGJRIUuNj3UIW8ZMkMaZh/yKCrYwW
SrpDN4iiAdo9iManejXFVbNPjlJ0WNATtQU4S2ebrPwzg3+vEWW5PVtGHI1s2Jny8IkNls68bvdY
pOnBFUl4/vOd5HeMLTbhTJ8cj1ha3AXjnnwC4a+u+wHOI8IFRClZT38sRSf8IAgh73bC1EGvKRGv
PLjKhxZ+Cg5gJjTcVy9A0KXp9w5hwIY/r8RTDN0ZWFj1mg91OoYmsbJzTFjWpUnuDCSQO0iq8Zfk
5RshMWKYaGFqERJ5hIqHfNgncbmHJFJeIuHSdCePunjQTWdcYBvtMpwACqk9Y50t1WHkcDOdUHaw
X60CfEH/X991blBtUxBRS1YnK0SuxnFKrxy6KMLEB2TbsZ0nig6FLqmwvgDvT4pBzOhkbSGs4/3g
fl/74uj8Y5uIjdohamiBr1uQCPmDFn28I1jnrvxBcmu3CCVjKSVJTxLxD5tFsbE6yMWmziDi/aVa
aUIzG6oG9V3hqzhSRi8V4QcpIZmEk6lNmY5XCQcCNwClqbCr8CSRWEi4hKGowgpyZ/UE8LgkDerz
ffE=
=KVsv
-----END PGP SIGNATURE-----


Attachment: None (type=text/plain)