RedCloth: ReDoS Vulnerability

RedCloth: ReDoS Vulnerability A denial of service vulnerability has been found in RedCloth. redcloth 2024-01-10 2024-01-10 908035 remote 4.3.2-r5 4.3.2-r5

RedCloth is a module for using Textile in Ruby

A vulnerability has been discovered in RedCloth. Please review the CVE identifier referenced below for details.

RedCloth is vulnerable to a regular expression denial of service ("ReDoS") attack via the sanitize_html function.

There is no known workaround at this time.

All RedCloth users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=dev-ruby/redcloth-4.3.2-r5"

CVE-2023-31606 ajak graaff