File _patchinfo of Package patchinfo.9348

<patchinfo incident="9348">
  <issue tracker="bnc" id="1113969">VUL-0: CVE-2018-16468: rubygem-loofah: XXS: remove the svg animate attribute `from` from the allowlist</issue>
  <issue tracker="bnc" id="1085967">VUL-1: CVE-2018-8048: rubygem-loofah: XSS Vulnerability due to unescaped characters by libcxml2</issue>
  <issue tracker="cve" id="2018-8048"/>
  <issue tracker="cve" id="2018-16468"/>
  <category>security</category>
  <rating>moderate</rating>
  <packager>mschnitzer</packager>
  <description>This update for rubygem-loofah fixes the following issues:

Security issues fixed:

- CVE-2018-16468: Fixed XXS by removing the svg animate attribute `from` from the allowlist (bsc#1113969).
- CVE-2018-8048: Fixed XSS vulnerability due to unescaped characters by libcxml2 (bsc#1085967).
</description>
  <summary>Security update for rubygem-loofah</summary>
</patchinfo>