shield Security update for xmltooling

SUSE-SLE-SERVER-12-SP2-2018-488

This update for xmltooling fixes the following issues: - CVE-2018-0489: Fixed a security bug when xmltooling mishandled digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486. (bsc#1083247)

• Release Date
  Mar 16 2018
• References
  Bugzilla: 1083247
  CVEs: CVE-2018-0489, CVE-2018-0486
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  libxmltooling6
  OpenSAML XMLTooling library

  1.5.6-3.6.1 lock rpm

  xmltooling
  OpenSAML XML library

  1.5.6-3.6.1 lock src

  xmltooling-schemas
  XMLTooling schemas and catalog

  1.5.6-3.6.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  libxmltooling6
  OpenSAML XMLTooling library

  1.5.6-3.6.1 lock rpm

  xmltooling
  OpenSAML XML library

  1.5.6-3.6.1 lock src

  xmltooling-schemas
  XMLTooling schemas and catalog

  1.5.6-3.6.1 lock rpm

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  libxmltooling6
  OpenSAML XMLTooling library

  1.5.6-3.6.1 lock rpm

  xmltooling
  OpenSAML XML library

  1.5.6-3.6.1 lock src

  xmltooling-schemas
  XMLTooling schemas and catalog

  1.5.6-3.6.1 lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  libxmltooling6
  OpenSAML XMLTooling library

  1.5.6-3.6.1 lock rpm

  xmltooling
  OpenSAML XML library

  1.5.6-3.6.1 lock src

  xmltooling-schemas
  XMLTooling schemas and catalog

  1.5.6-3.6.1 lock rpm