File _patchinfo of Package patchinfo.9220
<patchinfo incident="9220"> <issue tracker="bnc" id="1105443">VUL-1: CVE-2018-1000632: dom4j: version prior to version 2.1.1 contains a CWE-91: XML Injectionvulnerability in Class: Element. Methods: addElement, addAttribute that canresult in an attacker tampering with XML documents through XML</issue> <issue tracker="cve" id="2018-1000632"/> <category>security</category> <rating>moderate</rating> <packager>pmonrealgonzalez</packager> <description>This update for dom4j fixes the following issues: - CVE-2018-1000632: Prevent XML injection that could have resulted in an attacker tampering with XML documents (bsc#1105443). This update was imported from the SUSE:SLE-15:Update update project.</description> <summary>Security update for dom4j</summary> </patchinfo>