shield Security update for rubygem-loofah

SUSE-SLE-Product-HA-15-2018-2797

This update for rubygem-loofah fixes the following issues: Security issue fixed: - CVE-2018-16468: Fixed XXS by removing the svg animate attribute `from` from the allowlist (bsc#1113969).

• Release Date
  Nov 27 2018
• References
  Bugzilla: 1113969
  CVEs: CVE-2018-16468
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise High Availability Extension 15 ppc64le

• Packages
  ruby2.5-rubygem-loofah
  HTML/XML manipulation and sanitization based on Nokogiri

  2.2.2-4.3.1

  lock rpm

  rubygem-loofah
  HTML/XML manipulation and sanitization based on Nokogiri

  2.2.2-4.3.1

  lock src

SUSE Linux Enterprise High Availability Extension 15 x86_64

• Packages
  ruby2.5-rubygem-loofah
  HTML/XML manipulation and sanitization based on Nokogiri

  2.2.2-4.3.1

  lock rpm

  rubygem-loofah
  HTML/XML manipulation and sanitization based on Nokogiri

  2.2.2-4.3.1

  lock src

SUSE Linux Enterprise High Availability Extension 15 aarch64

• Packages
  ruby2.5-rubygem-loofah
  HTML/XML manipulation and sanitization based on Nokogiri

  2.2.2-4.3.1

  lock rpm

  rubygem-loofah
  HTML/XML manipulation and sanitization based on Nokogiri

  2.2.2-4.3.1

  lock src

SUSE Linux Enterprise High Availability Extension 15 s390x

• Packages
  ruby2.5-rubygem-loofah
  HTML/XML manipulation and sanitization based on Nokogiri

  2.2.2-4.3.1

  lock rpm

  rubygem-loofah
  HTML/XML manipulation and sanitization based on Nokogiri

  2.2.2-4.3.1

  lock src