Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-3701

Критический

ALT-PU-2018-3701: package python-module-bleach update to version 2.1.3-alt1

Источник
errata.altlinux.org
Дата публикации
09.06.2018
Дата обновления
09.06.2018
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades python-module-bleach to version 2.1.3-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized.

CVSS3: 9.8
nvd
больше 8 лет назад

An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized.

CVSS3: 9.8
debian
больше 8 лет назад

An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that ...

CVSS3: 9.8
github
почти 8 лет назад

Bleach URI Scheme Restriction Bypass