USN-6358-1: RedCloth vulnerability
It was discovered that RedCloth incorrectly handled certain inputs during html sanitisation. An attacker could possibly use this issue to cause a denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is USN-6358-1.
What is the title of the vulnerability?
The title of the vulnerability is RedCloth vulnerability.
What is the description of the vulnerability?
The RedCloth vulnerability is related to incorrect handling of certain inputs during html sanitization, which could potentially lead to a denial of service attack.
Which software is affected by this vulnerability?
The vulnerability affects the following software: Ubuntu 23.04 with ruby-redcloth version 4.3.2-4ubuntu0.23.04.1, Ubuntu 22.04 with ruby-redcloth version 4.3.2-4ubuntu0.22.04.1, Ubuntu 20.04 with ruby-redcloth version 4.3.2-3+deb10u1build0.20.04.1, Ubuntu 18.04 with ruby-redcloth version 4.3.2-3ubuntu0.1~esm1, and Ubuntu 16.04 with ruby-redcloth version 4.2.9-5ubuntu0.1~esm1.
How can I fix the RedCloth vulnerability?
To fix the RedCloth vulnerability, you should update the ruby-redcloth package to the specified versions: 4.3.2-4ubuntu0.23.04.1 for Ubuntu 23.04, 4.3.2-4ubuntu0.22.04.1 for Ubuntu 22.04, 4.3.2-3+deb10u1build0.20.04.1 for Ubuntu 20.04, 4.3.2-3ubuntu0.1~esm1 for Ubuntu 18.04, and 4.2.9-5ubuntu0.1~esm1 for Ubuntu 16.04.