Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Fedora 23 Update: Moderate XSS Fix for rubygem-rails-html-sanitizer

fedora
Calendar Grey February 28, 2016
Dist Fedora Esm H88
Patch resolved various XSS vulnerabilities affecting rubygem-rails-html-sanitizer on Fedora 23, classified under critical updates.
Security fix for CVE-2015-7578 CVE-2015-7579 CVE-2015-7580

Summary

HTML sanitization for Rails applications.

Update Information:

Security fix for CVE-2015-7578 CVE-2015-7579 CVE-2015-7580

Topics%20covered

Topics Covered

security advisory fedora xss issue rubygem html sanitization

Change Log

References


[ 1 ] Bug #1302014 - CVE-2015-7579 rubygem-rails-html-sanitizer: XSS vulnerability in Action View's strip_tags function https://bugzilla.redhat.com/show_bug.cgi?id=1302014 [ 2 ] Bug #1301920 - CVE-2015-7578 rails-html-sanitizer: XSS vulnerability due to unremoved attributes from tags https://bugzilla.redhat.com/show_bug.cgi?id=1301920

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update rubygem-rails-html-sanitizer' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: rubygem-rails-html-sanitizer
Product: Fedora 23
Version: 1.0.3
Release: 1.fc23
URL: https://github.com/rails/rails-html-sanitizer
Summary: This gem is responsible to sanitize HTML fragments in Rails applications

Topics%20covered

Topics Covered

security advisory fedora xss issue rubygem html sanitization

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.