Mike Gabriel pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ebc66f79 by Mike Gabriel at 2018-07-17T19:28:33+02:00
data/CVE/list: Ignore CVE-2018-3740 (ruby-sanitize) for jessie. Issue only
occurs with libxml2 >= 2.9.2.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -28196,6 +28196,7 @@ CVE-2018-3741 (There is a possible XSS vulnerability in
all rails-html-sanitizer
CVE-2018-3740 (A specially crafted HTML fragment can cause Sanitize gem for
Ruby to ...)
[experimental] - ruby-sanitize 4.6.5-1
- ruby-sanitize <unfixed> (bug #893610)
+ [jessie] - ruby-sanitize <ignored> (Only occurs with libxml2 >= 2.9.2,
jessie has 2.9.1).
NOTE: https://github.com/rgrove/sanitize/issues/176
NOTE:
https://github.com/rgrove/sanitize/commit/01629a162e448a83d901456d0ba8b65f3b03d46e
NOTE: Only an issue in combination with libxml2 >= 2.9.2
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/ebc66f79026e623c894cbce02ac99725e3b66733
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/ebc66f79026e623c894cbce02ac99725e3b66733
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
