Security update for translate-toolkit SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2018:0364-1 Final 1 1 2018-02-05T08:33:43Z current 2018-02-05T08:33:43Z 2018-02-05T08:33:43Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for translate-toolkit This update for translate-toolkit to 2.2.4 fixes several issues. This security issue was fixed: - Prevent inclusion of external ressources (XXE) (boo#1073535) These non-security issues were fixed: - Added support for nested and WebExtension JSON dialects. - po2txt no longer converts non-translatable strings. - Improvement for puncspace check. - Support for .xliff extension. - Added MinimalChecker and ReducedChecker checkers. - Fixed resolving of country names translations. - Refactored functions for resolving language/country names translation to be memory efficient. - Improvements for ts and subtitles formats. - Fixed Montenegrin language name. - Avoid resolving external entities while parsing XML. - Improvements for Android, ts and resx formats. - Added support for PHP nested arrays. - Added Kabyle language The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2018-02/msg00010.html E-Mail link for openSUSE-SU-2018:0364-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.3 translate-toolkit-2.2.4-4.1 translate-toolkit-devel-doc-2.2.4-4.1 translate-toolkit-2.2.4-4.1 as a component of openSUSE Leap 42.3 translate-toolkit-devel-doc-2.2.4-4.1 as a component of openSUSE Leap 42.3