xmlsec1 security update

2017-08-2100:00:00

linux.oracle.com

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.003 Low

EPSS

Percentile

63.8%

JSON

[1.2.20-7]

CVE-2017-1000061
Related: #1472092
Fix mis-applied patch hunk
[1.2.20-6]
CVE-2017-1000061
Resolves: #1472092

OSVersionArchitecturePackageVersionFilename
oracle linux7srcxmlsec1< 1.2.20-7.el7_4xmlsec1-1.2.20-7.el7_4.src.rpm
oracle linux7aarch64xmlsec1< 1.2.20-7.el7_4xmlsec1-1.2.20-7.el7_4.aarch64.rpm
oracle linux7aarch64xmlsec1-devel< 1.2.20-7.el7_4xmlsec1-devel-1.2.20-7.el7_4.aarch64.rpm
oracle linux7aarch64xmlsec1-gcrypt< 1.2.20-7.el7_4xmlsec1-gcrypt-1.2.20-7.el7_4.aarch64.rpm
oracle linux7aarch64xmlsec1-gcrypt-devel< 1.2.20-7.el7_4xmlsec1-gcrypt-devel-1.2.20-7.el7_4.aarch64.rpm
oracle linux7aarch64xmlsec1-gnutls< 1.2.20-7.el7_4xmlsec1-gnutls-1.2.20-7.el7_4.aarch64.rpm
oracle linux7aarch64xmlsec1-gnutls-devel< 1.2.20-7.el7_4xmlsec1-gnutls-devel-1.2.20-7.el7_4.aarch64.rpm
oracle linux7aarch64xmlsec1-nss< 1.2.20-7.el7_4xmlsec1-nss-1.2.20-7.el7_4.aarch64.rpm
oracle linux7aarch64xmlsec1-nss-devel< 1.2.20-7.el7_4xmlsec1-nss-devel-1.2.20-7.el7_4.aarch64.rpm
oracle linux7aarch64xmlsec1-openssl< 1.2.20-7.el7_4xmlsec1-openssl-1.2.20-7.el7_4.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	xmlsec1	< 1.2.20-7.el7_4	xmlsec1-1.2.20-7.el7_4.src.rpm
oracle linux	7	aarch64	xmlsec1	< 1.2.20-7.el7_4	xmlsec1-1.2.20-7.el7_4.aarch64.rpm
oracle linux	7	aarch64	xmlsec1-devel	< 1.2.20-7.el7_4	xmlsec1-devel-1.2.20-7.el7_4.aarch64.rpm
oracle linux	7	aarch64	xmlsec1-gcrypt	< 1.2.20-7.el7_4	xmlsec1-gcrypt-1.2.20-7.el7_4.aarch64.rpm
oracle linux	7	aarch64	xmlsec1-gcrypt-devel	< 1.2.20-7.el7_4	xmlsec1-gcrypt-devel-1.2.20-7.el7_4.aarch64.rpm
oracle linux	7	aarch64	xmlsec1-gnutls	< 1.2.20-7.el7_4	xmlsec1-gnutls-1.2.20-7.el7_4.aarch64.rpm
oracle linux	7	aarch64	xmlsec1-gnutls-devel	< 1.2.20-7.el7_4	xmlsec1-gnutls-devel-1.2.20-7.el7_4.aarch64.rpm
oracle linux	7	aarch64	xmlsec1-nss	< 1.2.20-7.el7_4	xmlsec1-nss-1.2.20-7.el7_4.aarch64.rpm
oracle linux	7	aarch64	xmlsec1-nss-devel	< 1.2.20-7.el7_4	xmlsec1-nss-devel-1.2.20-7.el7_4.aarch64.rpm
oracle linux	7	aarch64	xmlsec1-openssl	< 1.2.20-7.el7_4	xmlsec1-openssl-1.2.20-7.el7_4.aarch64.rpm