[ubuntu/mantic-security] ruby-sanitize 6.0.0-1.1ubuntu0.23.10.1 (Accepted)

[Evan Caville]

ruby-sanitize (6.0.0-1.1ubuntu0.23.10.1) mantic-security; urgency=medium

  * SECURITY UPDATE: XSS via style element when using "relaxed" or custom 
    config
    - debian/patches/CVE-2023-36823.patch: prevent style element from
      premature close by escaping "</" in 
      lib/sanitize/transformers/clean_css.rb.
    - CVE-2023-36823

Date: 2024-04-19 07:54:11.486131+00:00
Changed-By: Evan Caville <evan.caville at canonical.com>
https://launchpad.net/ubuntu/+source/ruby-sanitize/6.0.0-1.1ubuntu0.23.10.1
-------------- next part --------------
Sorry, changesfile not available.