svn commit: r465227 - head/security/vuxml

Wed Mar 21 19:04:15 UTC 2018

Author: sunpoet
Date: Wed Mar 21 19:04:13 2018
New Revision: 465227
URL: https://svnweb.freebsd.org/changeset/ports/465227

Log:
  Document rubygem-sanitize vulnerability

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================

--- head/security/vuxml/vuln.xml	Wed Mar 21 19:04:07 2018	(r465226)
+++ head/security/vuxml/vuln.xml	Wed Mar 21 19:04:13 2018	(r465227)
@@ -58,6 +58,39 @@ Notes:
   * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
 -->
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+  <vuln vid="39a30e0a-0c34-431b-9dce-b87cab02412a">
+    <topic>Sanitize -- XSS vulnerability</topic>
+    <affects>
+      <package>
+	<name>rubygem-sanitize</name>
+	<range><lt>2.6.3</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>Sanitize release:</p>
+	<blockquote cite="https://github.com/rgrove/sanitize/releases">
+	  <p>Fixed an HTML injection vulnerability that could allow XSS.</p>
+	  <p>When Sanitize <= 4.6.2 is used in combination with libxml2 >= 2.9.2,
+	    a specially crafted HTML fragment can cause libxml2 to generate
+	    improperly escaped output, allowing non-whitelisted attributes to be
+	    used on whitelisted elements.</p>
+	  <p>Sanitize now performs additional escaping on affected attributes to
+	  prevent this.</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <url>https://github.com/rgrove/sanitize/releases</url>
+      <url>https://github.com/rgrove/sanitize/issues/176</url>
+      <cvename>CVE-2018-3740</cvename>
+    </references>
+    <dates>
+      <discovery>2018-03-19</discovery>
+      <entry>2018-03-21</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="ba6d0c9b-f5f6-4b9b-a6de-3cce93c83220">
     <topic>Loofah -- XSS vulnerability</topic>
     <affects>
