Lucene search

K
suseSuseSUSE-SU-2016:0391-1
HistoryFeb 09, 2016 - 2:12 p.m.

Security update for rubygem-rails-html-sanitizer (important)

2016-02-0914:12:34
lists.opensuse.org
8

0.003 Low

EPSS

Percentile

65.9%

This update for rubygem-rails-html-sanitizer fixes the following issues:

  • CVE-2015-7579: XSS vulnerability in rails-html-sanitizer (bsc#963327)
  • CVE-2015-7578: XSS vulnerability via attributes (bsc#963326)
  • CVE-2015-7580: XSS via whitelist sanitizer (bsc#963328)