CentOS: Critical xmlsec1 Security Vulnerability - CENTOS-2020-9999 Alert

XML Security Library is a C library based on LibXML2 and OpenSSL.

The library was created with a goal to support major XML security

standards "XML Digital Signature" and "XML Encryption".

ChangeLog:

* Tue Aug 11 2009 Daniel Veillard - 1.2.12-1

- update to new upstream release 1.2.12

- includes fix for CVE-2009-0217

- cleanup spec file

References:

[ 1 ] Bug #511915 - CVE-2009-0217 xmlsec1, mono, xml-security-c, xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass

https://bugzilla.redhat.com/show_bug.cgi?id=511915

This update can be installed with the "yum" update program. Use

su -c 'yum update xmlsec1' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/