aboutsummaryrefslogtreecommitdiffstats
path: root/chinese/security/2021/dsa-4831.wml
blob: 0e3592dfb2c7e5a39b410596ea895a743523bb6c (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
#use wml::debian::translation-check translation="6d1643a67509927d077347faabf9fdb8fdcb2dc5"
<define-tag description>安全更新</define-tag>
<define-tag moreinfo>
<p>Johan Smits 发现ruby redcarpet,一个markdown解析器,没有正确地验证它的输入。
这将允许攻击者发起跨站点脚本攻击。</p>

<p>在稳定版(buster)中,此问题已被修复于
版本 3.4.0-4+deb10u1。</p>

<p>我们建议您升级您的 ruby-redcarpet 软件包。</p>

<p>查看关于 ruby-redcarpet 的详细信息,
请访问其安全追踪页面
<a href="https://security-tracker.debian.org/tracker/ruby-redcarpet">\
https://security-tracker.debian.org/tracker/ruby-redcarpet</a></p>
</define-tag>

# do not modify the following line
#include "$(ENGLISHDIR)/security/2021/dsa-4831.data"

© 2014-2024 Faster IT GmbH | imprint | privacy policy