< back to search

gpp_maybe Security update for xmltooling

SUSE-SLE-SDK-12-SP3-2018-107

This update for xmltooling fixes the following issues: - CVE-2018-0486: Fixed a security bug when xmltooling mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD (bsc#1075975)

Release Date

Jan 19 2018
References

Bugzilla: 1075975
CVEs: CVE-2018-0486
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

Packages

libxmltooling-devel
XMLTooling development Headers

1.5.6-3.3.2 lock rpm

xmltooling
OpenSAML XML library

1.5.6-3.3.2 lock src

SUSE Linux Enterprise Software Development Kit 12.3 s390x

Packages

libxmltooling-devel
XMLTooling development Headers

1.5.6-3.3.2 lock rpm

xmltooling
OpenSAML XML library

1.5.6-3.3.2 lock src

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

Packages

libxmltooling-devel
XMLTooling development Headers

1.5.6-3.3.2 lock rpm

xmltooling
OpenSAML XML library

1.5.6-3.3.2 lock src

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

Packages

libxmltooling-devel
XMLTooling development Headers

1.5.6-3.3.2 lock rpm

xmltooling
OpenSAML XML library

1.5.6-3.3.2 lock src