Jquery version needs update

Support
1

NethServer Version: 7.8.2003
Module: base

Problem: the file located at http://server/js/jquery-3.3.1.min.js is out of date. Jquery was updated on April 10 and the current version is 3.5.1. Two CVEs exist relating to cross site scripting.

When I try up do the standard update commands, yum or through the cockpit, jquery is not updated. I don’t want to manually install the rpm to update as it might break something. Is the new version being tested?

ref: https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022, http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023

2

NethServer bases on CentOS and relies on upstream. Usually CentOS uses older, more stable packages (js-jquery-2.2.4-3) and if there are security issues they patch it and provide a new version.
There’s no update in “epel-testing” yet so maybe the 2.2.4 version is not affected.