Upgrade to JQuery version 3.5.0 or later.

General support questions
Post Reply
itannu
Posts: 20
Joined: 2021/05/28 14:10:05

Upgrade to JQuery version 3.5.0 or later.

Post by itannu » 2021/06/04 21:35:13

Hi,
Can someone tell me how to upgrade "Jquery" in centOS7.
We have below requirement as per scan report.
Also command to check which version is installed.


Upgrade to JQuery version 3.5.0 or later.

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Upgrade to JQuery version 3.5.0 or later.

Post by TrevorH » 2021/06/05 14:47:52

As far as I can see, jquery comes from the EPEL yum repo in CentOS 7. If this is to fix a specific CVE then you should probably raise a bug on bugzilla.redhat.com in the Fedora EPEL section and request that the maintainer either rebases js-jquery to a newer version or backports the specific patch in question to the version that already exists.

A quick google for "jquery 3.5.0 cve" shows me that there are 2 CVEs that exist and were fixed in 3.5.0 and those are CVE-2020-11022 and CVE-2020-11023.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

itannu
Posts: 20
Joined: 2021/05/28 14:10:05

Re: Upgrade to JQuery version 3.5.0 or later.

Post by itannu » 2021/06/09 16:31:33

Thank you for your reply.

Post Reply