# CVE-2018-20676: bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo... CVE-2018-20676 is fixed in 29 products on 1 platform, first by RHSA-2020:4670, released November 4, 2020. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2018-20676 - Priority: Routine - CVSS: 6.1 (Moderate) - EPSS: 0.0384 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Nov 4, 2020 ## Description Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. The following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877) Security Fix(es): * js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251) * bootstrap: XSS in the data-target attribute (CVE-2016-10735) * bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040) * bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042) * bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676) * bootstrap: XSS in the affix configuration target property (CVE-2018-20677) * bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331) * js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358) * jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022) * ipa: No password length restriction leads to denial of service (CVE-2020-1722) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bind-dyndb-ldap RHEL 8 | 0:11.3-1.module+el8.3.0+6993+104f8db0 | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | bind-dyndb-ldap ol 8 | 0:11.3-1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | custodia RHEL 8 | 0:0.6.0-3.module+el8.1.0+4098+f286395e | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | custodia ol 8 | 0:0.6.0-3.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-client RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-client ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-client-common RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-client-common ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-client-epn RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-client-epn ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-client-samba RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-client-samba ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-common RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-common ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-healthcheck RHEL 8 | 0:0.4-6.module+el8.3.0+7710+e2408ce4 | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-healthcheck ol 8 | 0:0.4-6.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-healthcheck-core RHEL 8 | 0:0.4-6.module+el8.3.0+7711+c4441980 | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-healthcheck-core ol 8 | 0:0.4-6.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-python-compat RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-python-compat ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-selinux RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-selinux ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-server RHEL 8 | 0:4.8.7-12.module+el8.3.0+8222+c1bff54a | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-server ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-server-common RHEL 8 | 0:4.8.7-12.module+el8.3.0+8222+c1bff54a | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-server-common ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-server-dns RHEL 8 | 0:4.8.7-12.module+el8.3.0+8222+c1bff54a | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-server-dns ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | ipa-server-trust-ad RHEL 8 | 0:4.8.7-12.module+el8.3.0+8222+c1bff54a | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | ipa-server-trust-ad ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | opendnssec RHEL 8 | 0:2.1.6-2.module+el8.3.0+6580+328a3362 | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | opendnssec ol 8 | 0:2.1.6-2.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | python3-custodia RHEL 8 | 0:0.6.0-3.module+el8.1.0+4098+f286395e | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | python3-custodia ol 8 | 0:0.6.0-3.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | python3-ipaclient RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | python3-ipaclient ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | python3-ipalib RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | python3-ipalib ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | python3-ipaserver RHEL 8 | 0:4.8.7-12.module+el8.3.0+8222+c1bff54a | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | python3-ipaserver ol 8 | 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | python3-jwcrypto RHEL 8 | 0:0.5.0-1.module+el8.1.0+4107+4a66eb87 | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | python3-jwcrypto ol 8 | 0:0.5.0-1.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | python3-kdcproxy RHEL 8 | 0:0.4-5.module+el8.2.0+4691+a05b2456 | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | python3-kdcproxy ol 8 | 0:0.4-5.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | python3-pyusb RHEL 8 | 0:1.0.0-9.module+el8.1.0+4107+4a66eb87 | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | python3-pyusb ol 8 | 0:1.0.0-9.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | python3-qrcode RHEL 8 | 0:5.1-12.module+el8.1.0+4107+4a66eb87 | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | python3-qrcode ol 8 | 0:5.1-12.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | python3-qrcode-core RHEL 8 | 0:5.1-12.module+el8.1.0+4107+4a66eb87 | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | python3-qrcode-core ol 8 | 0:5.1-12.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | python3-yubico RHEL 8 | 0:1.3.2-9.module+el8.1.0+4107+4a66eb87 | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | python3-yubico ol 8 | 0:1.3.2-9.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | slapi-nis RHEL 8 | 0:0.56.5-4.module+el8.3.0+8222+c1bff54a | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | slapi-nis ol 8 | 0:0.56.5-4.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | softhsm RHEL 8 | 0:2.6.0-3.module+el8.3.0+6909+fb33717d | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | softhsm ol 8 | 0:2.6.0-3.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | | Linux | softhsm-devel RHEL 8 | 0:2.6.0-3.module+el8.3.0+6909+fb33717d | [RHSA-2020:4670](https://patchblox.com/security/data/fix/linux/rhsa-2020-4670.md) | Nov 4, 2020 | | Linux | softhsm-devel ol 8 | 0:2.6.0-3.module+el8.3.0+7868+2151076c | [ELSA-2020-4670](https://patchblox.com/security/data/fix/linux/elsa-2020-4670.md) | Nov 10, 2020 | --- Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.