[ubuntu/focal-security] ruby-sanitize 4.6.6-2.1~0.20.04.2 (Accepted)

[Evan Caville]

ruby-sanitize (4.6.6-2.1~0.20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: XSS via style element when using "relaxed" or custom                             
    config                                                                                            
    - debian/patches/CVE-2023-36823.patch: prevent style element from 
      premature close by escaping "</" in                                                             
      lib/sanitize/transformers/clean_css.rb.                                                         
    - CVE-2023-36823

Date: 2024-04-19 07:55:12.811141+00:00
Changed-By: Evan Caville <evan.caville at canonical.com>
https://launchpad.net/ubuntu/+source/ruby-sanitize/4.6.6-2.1~0.20.04.2
-------------- next part --------------
Sorry, changesfile not available.