Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Fedora 22 Critical Advisory: Rubygem-Rails-HTML-Sanitizer XSS Threat

fedora
Calendar Grey February 28, 2016
Dist Fedora Esm H88
Important security patch for Fedora 22's rubygem-rails-html-sanitizer fixes several XSS vulnerabilities.
Security fix for CVE-2015-7578 CVE-2015-7579 CVE-2015-7580

Summary

HTML sanitization to Rails applications.

Update Information:

Security fix for CVE-2015-7578 CVE-2015-7579 CVE-2015-7580

Topics%20covered

Topics Covered

security advisory fedora software update critical fix xss rubygem html sanitizer

Change Log

References


[ 1 ] Bug #1301920 - CVE-2015-7578 rails-html-sanitizer: XSS vulnerability due to unremoved attributes from tags https://bugzilla.redhat.com/show_bug.cgi?id=1301920 [ 2 ] Bug #1302014 - CVE-2015-7579 rubygem-rails-html-sanitizer: XSS vulnerability in Action View's strip_tags function https://bugzilla.redhat.com/show_bug.cgi?id=1302014

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update rubygem-rails-html-sanitizer' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rubygem-rails-html-sanitizer
Product: Fedora 22
Version: 1.0.1
Release: 2.fc22
URL: https://github.com/rails/rails-html-sanitizer
Summary: This gem is responsible to sanitize HTML fragments in Rails applications

Topics%20covered

Topics Covered

security advisory fedora software update critical fix xss rubygem html sanitizer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.