ipa-4.6.8-5.4.0.1.el7.AXS7

Asianux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* jquery: Passing HTML containing elements to manipulation methods could result in untrusted code execution (CVE-2020-11023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* cannot issue certs with multiple IP addresses corresponding to different hosts
* CA-less install does not set required permissions on KDC certificate
* IdM Web UI shows users as disabled
* Authentication and login times are over several seconds due to unindexed ipaExternalMember
* improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
* IPA WebUI inaccessible after upgrading - idoverride-memberof.js missing

CVE-2020-11023
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.