Lucene search

K
mageiaGentoo FoundationMGASA-2020-0176
HistoryApr 20, 2020 - 5:02 p.m.

Updated python-bleach packages fix security vulnerability

2020-04-2017:02:32
Gentoo Foundation
advisories.mageia.org
14

0.002 Low

EPSS

Percentile

58.8%

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False. (CVE-2020-6816) Regular expression denial of service. (CVE-2020-6817)

OSVersionArchitecturePackageVersionFilename
Mageia7noarchpython-bleach< 3.1.4-1python-bleach-3.1.4-1.mga7