Hello community, here is the log from the commit of package patchinfo.3870 for openSUSE:13.2:Update checked in at 2015-07-02 09:08:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.2:Update/patchinfo.3870 (Old) and /work/SRC/openSUSE:13.2:Update/.patchinfo.3870.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "patchinfo.3870" Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo incident="3870"> <packager>darix</packager> <issue tracker="bnc" id="912212">VUL-0: CVE-2012-6684: rubygem-RedCloth: XSS vulnerability</issue> <issue tracker="cve" id="CVE-2012-6684"></issue> <category>security</category> <rating>moderate</rating> <summary>Security update for rubygem-RedCloth</summary> <description>rubygem-RedCloth was updated to fix one security issue. The following vulnerability was fixed: CVE-2012-6684: A cross-site scripting (XSS) vulnerability allowed remote attackers to inject arbitrary web script or HTML via a javascript: URI (boo#912212) </description> </patchinfo>