Lucene search

K
suseSuseOPENSUSE-SU-2016:0356-1
HistoryFeb 07, 2016 - 5:11 p.m.

Security update for rubygem-rails-html-sanitizer (important)

2016-02-0717:11:11
lists.opensuse.org
33

0.003 Low

EPSS

Percentile

65.9%

This update for rubygem-rails-html-sanitizer fixes the following issues:

  • CVE-2015-7579: XSS vulnerability in rails-html-sanitizer (bsc#963327)
  • CVE-2015-7578: XSS vulnerability via attributes (bsc#963326)
  • CVE-2015-7580: XSS via whitelist sanitizer (bsc#963328)