Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 23: perl-HTML-Scrubber Moderate Security Advisory for XSS

perl-HTML-Scrubber-0.15-1.fc21 - update to 0.15 perl-HTML- Scrubber-0.15-1.fc22 - update to 0.15 perl-HTML-Scrubber-0.15-1.fc23 - update to 0.15. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-84a95e39d4 2015-11-30 18:50:49.284427 -------------------------------------------------------------------------------- Name : perl-HTML-Scrubber Product : Fedora 23 Version : 0.15 Release : 1.fc23 URL : https://metacpan.org/dist/HTML-Scrubber Summary : Library for scrubbing/sanitizing html Description : If you wanna "scrub" or "sanitize" html input in a reliable an flexible fashion, then this module is for you. I wasn't satisfied with HTML::Sanitizer because it is based on HTML::TreeBuilder, so I thought I'd write something similar that works directly with HTML::Parser. -------------------------------------------------------------------------------- Update Information: perl-HTML-Scrubber-0.15-1.fc21 - update to 0.15 perl-HTML- Scrubber-0.15-1.fc22 - update to 0.15 perl-HTML-Scrubber-0.15-1.fc23 - update to 0.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1276647 - CVE-2015-5667 perl-HTML-Scrubber: XSS vulnerability when function "comment" is enabled [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1276647 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update perl-HTML-Scrubber' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailinglist This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . CentOS patches perl-HTML-Scrubber to address XSS vulnerability. Use dnf for improved HTML protection.. Fedora Security Update, HTML Scrubber, XSS Fix Updates. . LinuxSecurity.com Team

Nov 30, 2015 Fedora