Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 10: 2009-8121 Moderate: xml-security-c HMAC Spoofing Advisory

fedora
Calendar Grey July 31, 2009
Dist Fedora Esm H88
The latest xml-security-c update in Fedora 10 addresses vulnerabilities related to HMAC spoofing and authentication, specifically fixing issues identified in CVE-2009-0217.
Fixes CVE-2009-0217 (#511915)

Summary

The xml-security-c library is a C++ implementation of the XML Digital Signature

specification. The library makes use of the Apache XML project's Xerces-C XML

Parser and Xalan-C XSLT processor. The latter is used for processing XPath and

XSLT transforms.

Update Information:

Fixes CVE-2009-0217 (#511915)

Topics%20covered

Topics Covered

security advisory moderate Fedora xml-security-c HMAC authentication

Change Log

References


[ 1 ] Bug #511915 - CVE-2009-0217 xmlsec1, mono, xml-security-c, xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass https://bugzilla.redhat.com/show_bug.cgi?id=511915

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update xml-security-c' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: xml-security-c
Product: Fedora 10
Version: 1.5.1
Release: 1.fc10
URL: Summary : C++ Implementation of W3C security standards for XML

Topics%20covered

Topics Covered

security advisory moderate Fedora xml-security-c HMAC authentication

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here