Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 517
Alerts This Week
Warning Icon 1 517

SUSE: 2018:3928-1 Moderate: rubygem-loofah XSS Security Update

suse
Calendar Grey November 27, 2018
Dist Suse Esm H88
SUSE has issued a security update for rubygem-loofah that mitigates a moderate cross-site scripting vulnerability, complete with comprehensive installation guidelines.
An update that fixes one vulnerability is now available

Summary

This update for rubygem-loofah fixes the following issues: Security issue fixed: - CVE-2018-16468: Fixed XXS by removing the svg animate attribute `from` from the allowlist (bsc#1113969). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2018-2797=1 - SUSE Linux Enterprise High Availability 15: zypper in -t patch SUSE-SLE-Product-HA-15-2018-2797=1 Package List: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (aarch64 ppc64le s390x x86_64):

Topics%20covered

Topics Covered

security advisory moderate XSS SUSE Linux Enterprise rubygem-loofah

References

#1113969

Cross- CVE-2018-16468

Affected Products:

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15

SUSE Linux Enterprise High Availability 15

https://www.suse.com/security/cve/CVE-2018-16468.html

https://bugzilla.suse.com/1113969

Announcement ID: SUSE-SU-2018:3928-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate XSS SUSE Linux Enterprise rubygem-loofah

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.