Security update for rubygem-loofah (moderate)

2018-11-30T00:12:22
ID OPENSUSE-SU-2018:3951-1
Type suse
Reporter Suse
Modified 2018-11-30T00:12:22

Description

This update for rubygem-loofah fixes the following issues:

Security issue fixed:

  • CVE-2018-16468: Fixed XXS by removing the svg animate attribute from from the allowlist (bsc#1113969).

This update was imported from the SUSE:SLE-15:Update update project.