Bug 1732595

Summary:	Current novnc version has XSS vulnerability
Product:	[Community] RDO	Reporter:	Jim Rollenhagen <jim>
Component:	novnc	Assignee:	Eoghan Glynn <eglynn>
Status:	CLOSED UPSTREAM	QA Contact:	Shai Revivo <srevivo>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	unspecified	CC:	lyarwood, srevivo
Target Milestone:	---
Target Release:	trunk
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2025-02-10 03:59:50 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jim Rollenhagen 2019-07-23 20:23:20 UTC

Description of problem:
Currently, the Rocky and Stein (and presumably earlier) versions of the RDO repositories package novnc 0.5.1. Per [0], novnc 0.6.2 fixes an XSS vulnerability. Could we please package a newer version without this vulnerability? Thanks!

[0] https://github.com/novnc/noVNC/issues/748
[1] https://bugs.launchpad.net/horizon/+bug/1656435

Comment 1 Red Hat Bugzilla 2025-02-10 03:59:50 UTC

This product has been discontinued or is no longer tracked in Red Hat Bugzilla.