[Git][security-tracker-team/security-tracker][master] 2 commits: Add fixing version information for CVE-2018-3740/ruby-sanitize

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b492f000 by Salvatore Bonaccorso at 2018-12-26T16:24:41Z
Add fixing version information for CVE-2018-3740/ruby-sanitize

- - - - -
d263bc08 by Salvatore Bonaccorso at 2018-12-26T16:33:50Z
CVE-2018-3740/ruby-sanitize: Reference fixes for 2.1.x version

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -51888,7 +51888,8 @@ CVE-2018-3740 (A specially crafted HTML fragment can cause Sanitize gem for Ruby
 	- ruby-sanitize 4.6.6-1 (bug #893610)
 	[jessie] - ruby-sanitize <ignored> (Only occurs with libxml2 >= 2.9.2, jessie has 2.9.1)
 	NOTE: https://github.com/rgrove/sanitize/issues/176
-	NOTE: https://github.com/rgrove/sanitize/commit/01629a162e448a83d901456d0ba8b65f3b03d46e
+	NOTE: https://github.com/rgrove/sanitize/commit/01629a162e448a83d901456d0ba8b65f3b03d46e (v4.6.3)
+	NOTE: Fixes for 2.1.x: https://github.com/rgrove/sanitize/compare/v2.1.0...v2.1.1
 	NOTE: Only an issue in combination with libxml2 >= 2.9.2
 	NOTE: The 'fragment' method was renamed from 'clean' method in earlier version
 	NOTE: in v3.0.0



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/8178259445cd3a9bd74fb3930987a0385bc432d0...d263bc08d24643fc2a7979cd0151410fc16316ae

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/8178259445cd3a9bd74fb3930987a0385bc432d0...d263bc08d24643fc2a7979cd0151410fc16316ae
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181226/58414462/attachment-0001.html>