Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-4269

Высокий

ALT-PU-2023-4269: package gem-rails-html-sanitizer update to version 1.5.0-alt1

Источник
errata.altlinux.org
Дата публикации
18.09.2023
Дата обновления
18.09.2023
Устраненные уязвимости
6
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades gem-rails-html-sanitizer to version 1.5.0-alt1.

Устраненные уязвимости6

Ссылки1

ALT-PU-2023-4269https://errata.altlinux.org/ALT-PU-2023-4269

Связанные уязвимости

altlinux логотип

ALT-PU-2023-1337

CVSS3: 7.5
altlinux
больше 3 лет назад

ALT-PU-2023-1337: package `gem-rails-html-sanitizer` update to version 1.5.0-alt1

suse-cvrf логотип

SUSE-SU-2023:3714-1

suse-cvrf
около 3 лет назад

Security update for rubygem-rails-html-sanitizer

redos логотип

ROS-20240815-13

CVSS3: 7.5
redos
около 2 лет назад

Множественные уязвимости rubygem-rails-html-sanitizer

ubuntu логотип

CVE-2022-23517

CVSS3: 7.5
ubuntu
почти 4 года назад

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

redhat логотип

CVE-2022-23517

CVSS3: 7.5
redhat
почти 4 года назад

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.