SUSE-SU-2022:3868-1

Details

This update for rubygem-loofah fixes the following issues:

CVE-2019-15587: Fixed issue in sanitization of crafted SVG elements (bsc#1154751).

Affected Packages

ruby2.5-rubygem-loofah

SUSE Linux Enterprise High Availability Extension 15SUSE Linux Enterprise High Availability Extension 15 SP1SUSE Linux Enterprise High Availability Extension 15 SP2SUSE Linux Enterprise High Availability Extension 15 SP3SUSE Linux Enterprise High Availability Extension 15 SP4

Fixed in:

2.2.2-150000.4.6.1

rubygem-loofah

SUSE Linux Enterprise High Availability Extension 15SUSE Linux Enterprise High Availability Extension 15 SP1SUSE Linux Enterprise High Availability Extension 15 SP2SUSE Linux Enterprise High Availability Extension 15 SP3SUSE Linux Enterprise High Availability Extension 15 SP4

Fixed in:

2.2.2-150000.4.6.1

ruby2.5-rubygem-loofah-doc

openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in:

2.2.2-150000.4.6.1

ruby2.5-rubygem-loofah-testsuite

openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in:

2.2.2-150000.4.6.1

References

REPORT

https://bugzilla.suse.com/1154751

WEB

https://www.suse.com/security/cve/CVE-2019-15587

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20223868-1/