Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Fedora 10 xml-security-c Important HMAC Spoofing Fix CVE-2009-0217

fedora
Calendar Grey July 31, 2009
Scroller Fedora
The latest xml-security-c update in Fedora 10 addresses vulnerabilities related to HMAC spoofing and authentication, specifically fixing issues identified in CVE-2009-0217.
Fixes CVE-2009-0217 (#511915)

Summary

The xml-security-c library is a C++ implementation of the XML Digital Signature

specification. The library makes use of the Apache XML project's Xerces-C XML

Parser and Xalan-C XSLT processor. The latter is used for processing XPath and

XSLT transforms.

Update Information:

Fixes CVE-2009-0217 (#511915)

Topics%20covered

Topics Covered

security advisory moderate fedora authentication xml-security-c HMAC

Change Log

References


[ 1 ] Bug #511915 - CVE-2009-0217 xmlsec1, mono, xml-security-c, xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass https://bugzilla.redhat.com/show_bug.cgi?id=511915

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update xml-security-c' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
moderate
Lowest
Low
Medium
High
Critical

Name: xml-security-c
Product: Fedora 10
Version: 1.5.1
Release: 1.fc10
URL: Summary : C++ Implementation of W3C security standards for XML

Topics%20covered

Topics Covered

security advisory moderate fedora authentication xml-security-c HMAC

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.