# RHSA-2020:4670: Security update for 29 packages RHSA-2020:4670, released November 4, 2020, fixes 10 CVEs across 29 products. None of them is reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/fix/linux/rhsa-2020-4670 - Platform: Linux - Released: Nov 4, 2020 - Priority: Routine (Closes 10 CVEs, none high severity) - CVEs: 10, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2020:4670 ## Applies to | Product | Release | Fixed in | |---|---|---| | [bind-dyndb-ldap](https://patchblox.com/security/data/product/linux/bind-dyndb-ldap.md) | RHEL 8 | 0:11.3-1.module+el8.3.0+6993+104f8db0 | | [custodia](https://patchblox.com/security/data/product/linux/custodia.md) | RHEL 8 | 0:0.6.0-3.module+el8.1.0+4098+f286395e | | [ipa-client](https://patchblox.com/security/data/product/linux/ipa-client.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | | [ipa-client-common](https://patchblox.com/security/data/product/linux/ipa-client-common.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | | [ipa-client-epn](https://patchblox.com/security/data/product/linux/ipa-client-epn.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | | [ipa-client-samba](https://patchblox.com/security/data/product/linux/ipa-client-samba.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | | [ipa-common](https://patchblox.com/security/data/product/linux/ipa-common.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | | [ipa-healthcheck](https://patchblox.com/security/data/product/linux/ipa-healthcheck.md) | RHEL 8 | 0:0.4-6.module+el8.3.0+7710+e2408ce4 | | [ipa-healthcheck-core](https://patchblox.com/security/data/product/linux/ipa-healthcheck-core.md) | RHEL 8 | 0:0.4-6.module+el8.3.0+7711+c4441980 | | [ipa-python-compat](https://patchblox.com/security/data/product/linux/ipa-python-compat.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | | [ipa-selinux](https://patchblox.com/security/data/product/linux/ipa-selinux.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | | [ipa-server](https://patchblox.com/security/data/product/linux/ipa-server.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8222+c1bff54a | | [ipa-server-common](https://patchblox.com/security/data/product/linux/ipa-server-common.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8222+c1bff54a | | [ipa-server-dns](https://patchblox.com/security/data/product/linux/ipa-server-dns.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8222+c1bff54a | | [ipa-server-trust-ad](https://patchblox.com/security/data/product/linux/ipa-server-trust-ad.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8222+c1bff54a | | [opendnssec](https://patchblox.com/security/data/product/linux/opendnssec.md) | RHEL 8 | 0:2.1.6-2.module+el8.3.0+6580+328a3362 | | [python3-custodia](https://patchblox.com/security/data/product/linux/python3-custodia.md) | RHEL 8 | 0:0.6.0-3.module+el8.1.0+4098+f286395e | | [python3-ipaclient](https://patchblox.com/security/data/product/linux/python3-ipaclient.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | | [python3-ipalib](https://patchblox.com/security/data/product/linux/python3-ipalib.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8223+6212645f | | [python3-ipaserver](https://patchblox.com/security/data/product/linux/python3-ipaserver.md) | RHEL 8 | 0:4.8.7-12.module+el8.3.0+8222+c1bff54a | | [python3-jwcrypto](https://patchblox.com/security/data/product/linux/python3-jwcrypto.md) | RHEL 8 | 0:0.5.0-1.module+el8.1.0+4107+4a66eb87 | | [python3-kdcproxy](https://patchblox.com/security/data/product/linux/python3-kdcproxy.md) | RHEL 8 | 0:0.4-5.module+el8.2.0+4691+a05b2456 | | [python3-pyusb](https://patchblox.com/security/data/product/linux/python3-pyusb.md) | RHEL 8 | 0:1.0.0-9.module+el8.1.0+4107+4a66eb87 | | [python3-qrcode](https://patchblox.com/security/data/product/linux/python3-qrcode.md) | RHEL 8 | 0:5.1-12.module+el8.1.0+4107+4a66eb87 | | [python3-qrcode-core](https://patchblox.com/security/data/product/linux/python3-qrcode-core.md) | RHEL 8 | 0:5.1-12.module+el8.1.0+4107+4a66eb87 | | [python3-yubico](https://patchblox.com/security/data/product/linux/python3-yubico.md) | RHEL 8 | 0:1.3.2-9.module+el8.1.0+4107+4a66eb87 | | [slapi-nis](https://patchblox.com/security/data/product/linux/slapi-nis.md) | RHEL 8 | 0:0.56.5-4.module+el8.3.0+8222+c1bff54a | | [softhsm](https://patchblox.com/security/data/product/linux/softhsm.md) | RHEL 8 | 0:2.6.0-3.module+el8.3.0+6909+fb33717d | | [softhsm-devel](https://patchblox.com/security/data/product/linux/softhsm-devel.md) | RHEL 8 | 0:2.6.0-3.module+el8.3.0+6909+fb33717d | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2020-11022](https://patchblox.com/security/data/cve/CVE-2020-11022.md) | Routine | libjs-jquery: In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to... | 6.1 | 0.9922 | | | [CVE-2019-11358](https://patchblox.com/security/data/cve/CVE-2019-11358.md) | Routine | apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... | 6.1 | 0.8682 | | | [CVE-2015-9251](https://patchblox.com/security/data/cve/CVE-2015-9251.md) | Routine | apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... | 6.1 | 0.2973 | | | [CVE-2019-8331](https://patchblox.com/security/data/cve/CVE-2019-8331.md) | Routine | apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... | 6.1 | 0.1640 | | | [CVE-2018-14040](https://patchblox.com/security/data/cve/CVE-2018-14040.md) | Routine | apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... | 6.1 | 0.0414 | | | [CVE-2016-10735](https://patchblox.com/security/data/cve/CVE-2016-10735.md) | Routine | fonts-glyphicons-halflings: In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS ispossible in the data-target attribute, a differ... | 6.1 | 0.0404 | | | [CVE-2018-14042](https://patchblox.com/security/data/cve/CVE-2018-14042.md) | Routine | apache-commons-collections: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur... | 6.1 | 0.0401 | | | [CVE-2018-20677](https://patchblox.com/security/data/cve/CVE-2018-20677.md) | Routine | bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo... | 6.1 | 0.0398 | | | [CVE-2018-20676](https://patchblox.com/security/data/cve/CVE-2018-20676.md) | Routine | bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo... | 6.1 | 0.0384 | | | [CVE-2020-1722](https://patchblox.com/security/data/cve/CVE-2020-1722.md) | Routine | bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo... | 5.3 | 0.0124 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo