-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 26 Dec 2018 23:32:37 +0100 Source: ruby-sanitize Binary: ruby-sanitize Architecture: source Version: 2.1.0-2+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: ruby-sanitize - whitelist-based HTML sanitizer Closes: 893610 Changes: ruby-sanitize (2.1.0-2+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Inproper filtering by libxml2 leads to HTML injection vulnerability (CVE-2018-3740) (Closes: #893610) * Drop fix-tests-sanitize.patch patch Checksums-Sha1: f51df99ccb8d3d735ca58ddf635a2c39b409660e 2277 ruby-sanitize_2.1.0-2+deb9u1.dsc 3b41fa38108feb1a692f93ef97c2f2b0a249162f 18119 ruby-sanitize_2.1.0.orig.tar.gz dc729a54e5395d1a81d5fcd8b3cb884835a62a50 7836 ruby-sanitize_2.1.0-2+deb9u1.debian.tar.xz 18e69af8ead72fbda876e1b43960d2113abb41cb 6141 ruby-sanitize_2.1.0-2+deb9u1_source.buildinfo Checksums-Sha256: 2059daf6821fc596640fea134a49f53ec605b5b0c49af3fdd6170fc61c1e492b 2277 ruby-sanitize_2.1.0-2+deb9u1.dsc 3b6aaf24987ad656bc240905fbca73508b1d0c39411f2c84997125b3d00571e5 18119 ruby-sanitize_2.1.0.orig.tar.gz af2e229707f4ba876955c42d2e2eb8881f4f066962b9acc7aaf15afc4d8f363d 7836 ruby-sanitize_2.1.0-2+deb9u1.debian.tar.xz 6c05dfffebdcf69587b0a49f302ca6e9cd320f1da8c968597136f5d1bb59ab3f 6141 ruby-sanitize_2.1.0-2+deb9u1_source.buildinfo Files: a701c67ddedf887de041605bde4c3184 2277 ruby optional ruby-sanitize_2.1.0-2+deb9u1.dsc 4b4e629451f8cad1bb9c83b90c794d88 18119 ruby optional ruby-sanitize_2.1.0.orig.tar.gz 527187827f1eab4f378f0d7b3f30bc5a 7836 ruby optional ruby-sanitize_2.1.0-2+deb9u1.debian.tar.xz 1773f3a8eec3dfc3beec7f4894d2811c 6141 ruby optional ruby-sanitize_2.1.0-2+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlwkAoNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Emi4P/2vSN5wY88PZx43rZ+A7Ve7s7MEU/zBQ Izxlg5++f0kC7vD44buV30MUEw8tivdKj/QobMMZA1+v4pM0jJTQ+rRNVsQh/LBT yHGQuobconlj+Ahaggz0g4bwZpPZK38V+TqWFR4ghxktW/sg2DNqzqFea9az/6hn EDJfYvO94EQFYeW0UCA93D45Y14jciKekbiGc7WTQ8KAkkuNCwnv5SauaZkPZO2o QBB72hDNO+idfDk5l64aK7NWE1hRANcLYfwjXxB/XEP9XwU3a+/LpXATNtyKM4JB 39Iw2oJtd3vQIvUxZ3ABRYQ6TCEDw7XdBOOmFk3/XNf5Z6pdNluMno96GnOfyYJU 6At7ebG4c/gwhbjnF2J3TlumBZlmS4dxN2z9wnPzc4Rf+DB5KJ3paAmmcFBht2hz GjrrV3xqCRGEk0ovQxdmH7xVBXW9s4/355tuAe0AJ/dhxcDX/wfzRK+IyM/Bs0tK YZvpE0lCryZxg8h6xXb0GPeI4dfwfWGGipQXtEuze9VY3hqMl3ktgReJ269jF3nf LJE9z7Z806ghLzM7DGAME7ldk8R1CBOO89XRoglArcCBe75hk3PRzDYuXvAdyf5y b84a0Kl/4imgvpnLJcFlRYO6Ra6wCY39AN5Dfo2eRHYiJm7P7FkUhvhk8TMDsnnA TLpBKnOTOqaC =7YGY -----END PGP SIGNATURE-----