File _patchinfo of Package patchinfo.6447

<patchinfo incident="6447">
  <issue id="1075975" tracker="bnc">VUL-0: CVE-2018-0486: xmltooling: Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Providerbefore 2.6.0 on Windows and other products, mishandles digital signatures ofuser attribute data</issue>
  <issue id="2018-0486" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>kstreitova</packager>
  <description>This update for xmltooling fixes the following issues:

- CVE-2018-0486: Fixed a security bug when xmltooling mishandles digital
  signatures of user attribute data, which allows remote attackers to obtain
  sensitive information or conduct impersonation attacks via a crafted DTD
  (bsc#1075975)
</description>
  <summary>Security update for xmltooling</summary>
</patchinfo>