Ubuntu 6358-1 moderate: ruby-redcloth denial of service due to input issues

ubuntu

September 13, 2023

RedCloth could be made to crash if it received specially crafted input.

Summary

RedCloth could be made to crash if it received specially crafted

input.

Software Description:

- ruby-redcloth: Textile module for Ruby

Details:

It was discovered that RedCloth incorrectly handled certain inputs during

html sanitisation. An attacker could possibly use this issue to cause a

denial of service.

Topics Covered

security advisory moderate denial of service software update ubuntu input issue redcloth

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   ruby-redcloth                   4.3.2-4ubuntu0.23.04.1

Ubuntu 22.04 LTS:
   ruby-redcloth                   4.3.2-4ubuntu0.22.04.1

Ubuntu 20.04 LTS:
   ruby-redcloth                   4.3.2-3+deb10u1build0.20.04.1

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
   ruby-redcloth                   4.3.2-3ubuntu0.1~esm1

Ubuntu 16.04 LTS (Available with Ubuntu Pro):
   ruby-redcloth                   4.2.9-5ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.