< back to search

shield Security update for xmltooling

SUSE-SLE-SDK-12-SP3-2018-488

This update for xmltooling fixes the following issues: - CVE-2018-0489: Fixed a security bug when xmltooling mishandled digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486. (bsc#1083247)

Release Date

Mar 16 2018
References

Bugzilla: 1083247
CVEs: CVE-2018-0489, CVE-2018-0486
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

Packages

libxmltooling-devel
XMLTooling development Headers

1.5.6-3.6.1 lock rpm

xmltooling
OpenSAML XML library

1.5.6-3.6.1 lock src

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

Packages

libxmltooling-devel
XMLTooling development Headers

1.5.6-3.6.1 lock rpm

xmltooling
OpenSAML XML library

1.5.6-3.6.1 lock src

SUSE Linux Enterprise Software Development Kit 12.3 s390x

Packages

libxmltooling-devel
XMLTooling development Headers

1.5.6-3.6.1 lock rpm

xmltooling
OpenSAML XML library

1.5.6-3.6.1 lock src

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

Packages

libxmltooling-devel
XMLTooling development Headers

1.5.6-3.6.1 lock rpm

xmltooling
OpenSAML XML library

1.5.6-3.6.1 lock src