FEDORA-2016-59ce8b61dd — security update for rubygem-rails-html-sanitizer

FEDORA-2016-59ce8b61dd created by pvalena 4 years ago for Fedora 23

stable

Security fix for CVE-2015-7578 CVE-2015-7579 CVE-2015-7580

sudo dnf upgrade --advisory=FEDORA-2016-59ce8b61dd

This update has been submitted for testing by pvalena.

This update has been pushed to testing.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for stable by pvalena.

This update has been pushed to stable.

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

BZ#1301920 CVE-2015-7578 rails-html-sanitizer: XSS vulnerability due to unremoved attributes from tags

BZ#1301921 CVE-2015-7578 rubygem-rails-html-sanitizer: ruby: XSS vulnerability in rails-html-sanitizer [fedora-all]

BZ#1302014 CVE-2015-7579 rubygem-rails-html-sanitizer: XSS vulnerability in Action View's strip_tags function

BZ#1302016 rubygem-rails-html-sanitizer: XSS vulnerability in Action View's strip_tags function [fedora-all]