Mandriva Linux Security Advisory : xmlsec1 (MDVSA-2011:063)

A vulnerability was discovered and corrected in xmlsec1 : xslt.c in XML Security Library aka xmlsec before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a...

[ MDVSA-2011:063 ] xmlsec1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:063 http://www.mandriva.com/security/ Package : xmlsec1 Date : April 4, 2011 Affected: 2009.0, 2010.0, Enterprise Server 5.0 Problem Description: A vulnerability was discovered and corrected in xmlsec1: xslt...

Mandriva Security Advisory MDVSA-2009:318 (xmlsec1)

The remote host is missing an update to xmlsec1 announced via advisory MDVSA-2009:318. OpenVAS Vulnerability Test $Id: mdksa2009318.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:318 xmlsec1 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandriva Linux Security Advisory : xmlsec1 (MDVSA-2009:318)

Multiple security vulnerabilities has been identified and fixed in xmlsec1 : A missing check for the recommended minimum length of the truncated form of HMAC-based XML signatures was found in xmlsec1 prior to 1.2.12. An attacker could use this flaw to create a specially crafted XML file that forg...

Mandrake Security Advisory MDVSA-2009:267 (xmlsec1)

The remote host is missing an update to xmlsec1 announced via advisory MDVSA-2009:267. OpenVAS Vulnerability Test $Id: mdksa2009267.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:267 xmlsec1 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:267 (xmlsec1)

The remote host is missing an update to xmlsec1 announced via advisory MDVSA-2009:267. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : xmlsec1 (MDVSA-2009:267)

A vulnerability has been found and corrected in xmlsec1 : A missing check for the recommended minimum length of the truncated form of HMAC-based XML signatures was found in xmlsec1 prior to 1.2.12. An attacker could use this flaw to create a specially crafted XML file that forges an XML signature...

CentOS Security Advisory CESA-2009:1428 (xmlsec1)

The remote host is missing updates to xmlsec1 announced in advisory CESA-2009:1428. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CentOS Security Advisory CESA-2009:1428 (xmlsec1)

The remote host is missing updates to xmlsec1 announced in advisory CESA-2009:1428. CESA-2009:1428 64901 6 $Id: ovcesa20091428.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1428 xmlsec1 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RHEL 4 / 5 : xmlsec1 (RHSA-2009:1428)

Updated xmlsec1 packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The XML Security Library is a C library based on libxml2 and OpenSSL. It implements the...

CentOS 4 / 5 : xmlsec1 (CESA-2009:1428)

Updated xmlsec1 packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The XML Security Library is a C library based on libxml2 and OpenSSL. It implements the...

xmlsec1 security update

1.2.9-8.1.1 - Fix a security issue on short hmac lenght CVE-2009-0217 - Resolves: rhbz516724...

Fedora Core 10 FEDORA-2009-8456 (xmlsec1)

The remote host is missing an update to xmlsec1 announced via advisory FEDORA-2009-8456. OpenVAS Vulnerability Test $Id: fcore20098456.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8456 xmlsec1 Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-8456 (xmlsec1)

The remote host is missing an update to xmlsec1 announced via advisory FEDORA-2009-8456. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 11 FEDORA-2009-8473 (xmlsec1)

The remote host is missing an update to xmlsec1 announced via advisory FEDORA-2009-8473. OpenVAS Vulnerability Test $Id: fcore20098473.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8473 xmlsec1 Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora 10 : xmlsec1-1.2.12-1.fc10 (2009-8456)

Tue Aug 11 2009 Daniel Veillard - 1.2.12-1 - update to new upstream release 1.2.12 - includes fix for CVE-2009-0217 - cleanup spec file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 11 : xmlsec1-1.2.12-1.fc11 (2009-8473)

Tue Aug 11 2009 Daniel Veillard - 1.2.12-1 - update to new upstream release 1.2.12 - includes fix for CVE-2009-0217 - cleanup spec file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...