Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Calendar White Jun 05, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

Calendar White Jun 05, 2026
Critical
Suse Large Esm H900
SuSE

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Calendar White Jun 05, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 5 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorymoderateupdate

Fedora 37: FEDORA-2022-a6812b0224 Moderate: xmlsec1 Integer Overflow Fix

Update to 2.10.3 * Fix CVE-2022-40303 * Fix CVE-2022-40304. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-a6812b0224 2022-11-13 01:11:59.258299 --------------------------------------------------------------------------------Name : xmlsec1 Product : Fedora 37 Version : 1.2.34 Release : 4.fc37 URL : https://www.aleksey.com/xmlsec/ Summary : Library providing support for "XML Signature" and "XML Encryption" standards Description : XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to support major XML security standards "XML Digital Signature" and "XML Encryption". --------------------------------------------------------------------------------Update Information: Update to 2.10.3 * Fix CVE-2022-40303 * Fix CVE-2022-40304 --------------------------------------------------------------------------------ChangeLog: * Mon Oct 24 2022 David King - 1.2.34-4 - Rebuild against libxml2 (#2136800) * Mon Oct 24 2022 David King - 1.2.34-3 - Rebuild against libxml2 (#2136800) --------------------------------------------------------------------------------References: [ 1 ] Bug #2119077 - libxml2-2.10.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2119077 [ 2 ] Bug #2136274 - CVE-2022-40303 libxml2: integer overflows with XML_PARSE_HUGE [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2136274 [ 3 ] Bug #2136293 - CVE-2022-40304 libxml2: dict corruption caused by entity reference cycles [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2136293 [ 4 ] Bug #2136800 - openconnect fails due to missing symbol xmlIOFTPRead https://bugzilla.redhat.com/show_bug.cgi?id=2136800 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-a6812b0224' at thecommand line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Upgrade your Fedora installation by applying xmlsec1 patches that address severe integer overflow vulnerabilities, ensuring enhanced safety.. Fedora Updates, XML Signature, XML Encryption, Security Fixes, Software Maintenance. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Nov 12, 2022 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorycritical issueFedora

Fedora 36: FEDORA-2022-aeafd24818 Critical: xmlsec1 Integer Overflows

Update to 2.10.3 * Fix CVE-2022-40303 * Fix CVE-2022-40304. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-aeafd24818 2022-10-25 13:12:34.597448 --------------------------------------------------------------------------------Name : xmlsec1 Product : Fedora 36 Version : 1.2.33 Release : 3.fc36 URL : https://www.aleksey.com/xmlsec/ Summary : Library providing support for "XML Signature" and "XML Encryption" standards Description : XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to support major XML security standards "XML Digital Signature" and "XML Encryption". --------------------------------------------------------------------------------Update Information: Update to 2.10.3 * Fix CVE-2022-40303 * Fix CVE-2022-40304 --------------------------------------------------------------------------------ChangeLog: * Mon Oct 24 2022 David King - 1.2.33-3 - Rebuild against libxml2 (#2136800) --------------------------------------------------------------------------------References: [ 1 ] Bug #2119077 - libxml2-2.10.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2119077 [ 2 ] Bug #2136274 - CVE-2022-40303 libxml2: integer overflows with XML_PARSE_HUGE [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2136274 [ 3 ] Bug #2136293 - CVE-2022-40304 libxml2: dict corruption caused by entity reference cycles [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2136293 [ 4 ] Bug #2136800 - openconnect fails due to missing symbol xmlIOFTPRead https://bugzilla.redhat.com/show_bug.cgi?id=2136800 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-aeafd24818' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . An update for xmlsec1 has been released for Fedora 36, resolving two significant vulnerabilities. It's crucial to upgrade to the latest version to ensure the security of your system.. xml security library, Fedora update, xml security, xmlsec update. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 25, 2022 •Critical Fedora
Banner 2 1028x280 1708121730 1 1771599631
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorydenial of servicesecurity issue

Ubuntu 16.04 ESM USN-5674-1: Critical XML Library DoS Issue

XML Security Library could be made to crash if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-5674-1 October 13, 2022 xmlsec1 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM Summary: XML Security Library could be made to crash if it opened a specially crafted file. Software Description: - xmlsec1: XML security command line processor Details: It was discovered that XML Security Library incorrectly handled certain input documents. An attacker could possibly use this issue to obtain sensitive information or cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: libxmlsec1 1.2.20-2ubuntu4+esm1 xmlsec1 1.2.20-2ubuntu4+esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5674-1 CVE-2017-1000061 . A critical vulnerability exists in the XML Security Library on Ubuntu 16.04 ESM. It can lead to system crashes and data leakage, requiring immediate patching and assessments.. Ubuntu XML Security, xmlsec1 Fix, Denial of Service. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 13, 2022 •Critical Ubuntu
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorydenial of serviceinformation disclosure

Mageia: High Risk of Denial Of Service in xmlsec1 Found 2020-0104

Updated xmlsec1 packages fix security vulnerability: It was discovered xmlsec1's use of libxml2 inadvertently enabled external entity expansion (XXE) along with validation. An attacker could craft an XML file that would cause xmlsec1 to try and read local files or HTTP/FTP . MGASA-2020-0104 - Updated xmlsec1 packages fix security vulnerability Publication date: 26 Feb 2020 URL: https://advisories.mageia.org/MGASA-2020-0104.html Type: security Affected Mageia releases: 7 CVE: CVE-2017-1000061 Updated xmlsec1 packages fix security vulnerability: It was discovered xmlsec1's use of libxml2 inadvertently enabled external entity expansion (XXE) along with validation. An attacker could craft an XML file that would cause xmlsec1 to try and read local files or HTTP/FTP URLs, leading to information disclosure or denial of service (CVE-2017-1000061). References: - https://bugs.mageia.org/show_bug.cgi?id=26174 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/3PWHBRWXR3RNPHDSTQI6UWDG5ETOQ7VR/ - https://www.cve.org/CVERecord?id=CVE-2017-1000061 SRPMS: - 7/core/xmlsec1-1.2.29-1.mga7 . Recent updates to xmlsec1 packages tackle critical security vulnerabilities that may lead to XML attacks. For detailed insights, refer to the official documentation. xmlsec1 updates, Mageia security, information disclosure, XML vulnerability. . LinuxSecurity.com Team

Calendar 2 Feb 26, 2020 Mageia
Banner 2 1028x280 1708121730 1 1771599631
200
Ls Advisories Scientific Esm H240
Price Tag 1security advisorydoSinformation disclosure

Scientific Linux SL7: SLSA-2017:2492-1 Moderate: xmlsec1 DoS Risk

It was discovered xmlsec1's use of libxml2 inadvertently enabled external entity expansion (XXE) along with validation. An attacker could craft an XML file that would cause xmlsec1 to try and read local files or HTTP/FTP URLs, leading to information disclosure or denial of service. (CVE-2017-1000061) SL7 x86_64 xmlsec1-1.2.20-7.el7_4.i686.rpm xmlsec1-1.2.20-7.el7_4.x86_64.rpm xm [More...]. Synopsis: Moderate: xmlsec1 security update Advisory ID: SLSA-2017:2492-1 Issue Date: 2017-08-21 CVE Numbers: CVE-2017-1000061 -- Security Fix(es): * It was discovered xmlsec1's use of libxml2 inadvertently enabled external entity expansion (XXE) along with validation. An attacker could craft an XML file that would cause xmlsec1 to try and read local files or HTTP/FTP URLs, leading to information disclosure or denial of service. (CVE-2017-1000061) -- SL7 x86_64 xmlsec1-1.2.20-7.el7_4.i686.rpm xmlsec1-1.2.20-7.el7_4.x86_64.rpm xmlsec1-debuginfo-1.2.20-7.el7_4.i686.rpm xmlsec1-debuginfo-1.2.20-7.el7_4.x86_64.rpm xmlsec1-openssl-1.2.20-7.el7_4.i686.rpm xmlsec1-openssl-1.2.20-7.el7_4.x86_64.rpm xmlsec1-devel-1.2.20-7.el7_4.i686.rpm xmlsec1-devel-1.2.20-7.el7_4.x86_64.rpm xmlsec1-gcrypt-1.2.20-7.el7_4.i686.rpm xmlsec1-gcrypt-1.2.20-7.el7_4.x86_64.rpm xmlsec1-gcrypt-devel-1.2.20-7.el7_4.i686.rpm xmlsec1-gcrypt-devel-1.2.20-7.el7_4.x86_64.rpm xmlsec1-gnutls-1.2.20-7.el7_4.i686.rpm xmlsec1-gnutls-1.2.20-7.el7_4.x86_64.rpm xmlsec1-gnutls-devel-1.2.20-7.el7_4.i686.rpm xmlsec1-gnutls-devel-1.2.20-7.el7_4.x86_64.rpm xmlsec1-nss-1.2.20-7.el7_4.i686.rpm xmlsec1-nss-1.2.20-7.el7_4.x86_64.rpm xmlsec1-nss-devel-1.2.20-7.el7_4.i686.rpm xmlsec1-nss-devel-1.2.20-7.el7_4.x86_64.rpm xmlsec1-openssl-devel-1.2.20-7.el7_4.i686.rpm xmlsec1-openssl-devel-1.2.20-7.el7_4.x86_64.rpm - Scientific Linux Development Team . A recent xmlsec1 update for Scientific Linux mitigates vulnerabilities related to external entity expansion thatcould result in data leakage.. xmlsec1, Scientific Linux, libxml2 security, external entity vulnerability, DoS risk. . LinuxSecurity.com Team

Calendar 2 Aug 21, 2017 Scientific Linux
200
Ls Advisories Scientific Esm H240
Price Tag 1security advisorymoderateupdate

Scientific Linux: Moderate Xmlsec1 Update For i386/x86_64 Systems

Moderate: xmlsec1 security and bug fix update. Date: Thu, 5 May 2011 16:05:30 -0500 Reply-To: This email address is being protected from spambots. You need JavaScript enabled to view it. Sender: Security Errata for Scientific Linux From: Jason Harrington Organization: FNAL/CD/REX/SAG Subject: Security ERRATA Moderate: xmlsec1 on SL4.x, SL5.x i386/x86_64 Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. MIME-Version: 1.0 Synopsis: Moderate: xmlsec1 security and bug fix update Issue date: 2011-05-04 CVE Names: CVE-2011-1425 A flaw was found in the way xmlsec1 handled XML files that contain an XSLT transformation specification. A specially-crafted XML file could cause xmlsec1 to create or overwrite an arbitrary file while performing the verification of a file's digital signature. (CVE-2011-1425) After installing the update, all running applications that use the xmlsec1 library must be restarted for the update to take effect. SL 4.x SRPMS: xmlsec1-1.2.6-3.2.src.rpm i386: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-devel-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-devel-1.2.6-3.2.i386.rpm x86_64: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-1.2.6-3.2.x86_64.rpm xmlsec1-devel-1.2.6-3.2.x86_64.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.x86_64.rpm xmlsec1-openssl-devel-1.2.6-3.2.x86_64.rpm SL 5.x SRPMS: xmlsec1-1.2.9-8.1.2.src.rpm i386: xmlsec1-1.2.9-8.1.2.i386.rpm xmlsec1-devel-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.i386.rpm xmlsec1-nss-1.2.9-8.1.2.i386.rpm xmlsec1-nss-devel-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.i386.rpm x86_64: xmlsec1-1.2.9-8.1.2.i386.rpm xmlsec1-1.2.9-8.1.2.x86_64.rpm xmlsec1-devel-1.2.9-8.1.2.i386.rpm xmlsec1-devel-1.2.9-8.1.2.x86_64.rpm xmlsec1-gnutls-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-1.2.9-8.1.2.x86_64.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.x86_64.rpm xmlsec1-nss-1.2.9-8.1.2.i386.rpm xmlsec1-nss-1.2.9-8.1.2.x86_64.rpm xmlsec1-nss-devel-1.2.9-8.1.2.i386.rpm xmlsec1-nss-devel-1.2.9-8.1.2.x86_64.rpm xmlsec1-openssl-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-1.2.9-8.1.2.x86_64.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.x86_64.rpm - Scientific Linux Development Team . Incremental xmlsec1 upgrade for Scientific Linux to resolve file replacement concerns and issues impacting i386/x86_64 architectures.. Scientific Linux, xmlsec1 update, file overwrite issue, moderate security fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 May 05, 2011 •Important Scientific Linux
Banner 2 1028x280 1708121730 1 1771599631
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorysecurity fixRed Hat Enterprise Linux

Red Hat Enterprise Linux: RHSA-2011-0486 moderate: xmlsec1 file creation

Updated xmlsec1 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: xmlsec1 security and bug fix update Advisory ID: RHSA-2011:0486-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2011:0486.html Issue date: 2011-05-04 CVE Names: CVE-2011-1425 ==================================================================== 1. Summary: Updated xmlsec1 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: The XML Security Library is a C library based on libxml2 and OpenSSL that implements the XML Digital Signature and XML Encryption standards. A flaw was found in the way xmlsec1 handled XML files that contain an XSLT transformation specification. A specially-crafted XML file could cause xmlsec1 to create or overwrite an arbitrary file while performing the verification of afile's digital signature. (CVE-2011-1425) Red Hat would like to thank Nicolas Grégoire and Aleksey Sanin for reporting this issue. This update also fixes the following bug: * xmlsec1 previously used an incorrect search path when searching for crypto plug-in libraries, possibly trying to access such libraries using a relative path. (BZ#558480, BZ#700467) Users of xmlsec1 should upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, all running applications that use the xmlsec1 library must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 5. Bugs fixed (http://bugzilla.redhat.com/): 558480 - xmlsec1: bogus lt_dlopen() search path [rhel-4] 692133 - CVE-2011-1425 xmlsec1: arbitrary file creation when verifying signatures 700467 - xmlsec1: bogus lt_dlopen() search path [rhel-5] 6. Package List: Red Hat Enterprise Linux AS version4: Source: i386: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-devel-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-devel-1.2.6-3.2.i386.rpm ia64: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-1.2.6-3.2.ia64.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.ia64.rpm xmlsec1-devel-1.2.6-3.2.ia64.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.ia64.rpm xmlsec1-openssl-devel-1.2.6-3.2.ia64.rpm ppc: xmlsec1-1.2.6-3.2.ppc.rpm xmlsec1-1.2.6-3.2.ppc64.rpm xmlsec1-debuginfo-1.2.6-3.2.ppc.rpm xmlsec1-debuginfo-1.2.6-3.2.ppc64.rpm xmlsec1-devel-1.2.6-3.2.ppc.rpm xmlsec1-openssl-1.2.6-3.2.ppc.rpm xmlsec1-openssl-1.2.6-3.2.ppc64.rpm xmlsec1-openssl-devel-1.2.6-3.2.ppc.rpm s390: xmlsec1-1.2.6-3.2.s390.rpm xmlsec1-debuginfo-1.2.6-3.2.s390.rpm xmlsec1-devel-1.2.6-3.2.s390.rpm xmlsec1-openssl-1.2.6-3.2.s390.rpm xmlsec1-openssl-devel-1.2.6-3.2.s390.rpm s390x: xmlsec1-1.2.6-3.2.s390.rpm xmlsec1-1.2.6-3.2.s390x.rpm xmlsec1-debuginfo-1.2.6-3.2.s390.rpm xmlsec1-debuginfo-1.2.6-3.2.s390x.rpm xmlsec1-devel-1.2.6-3.2.s390x.rpm xmlsec1-openssl-1.2.6-3.2.s390.rpm xmlsec1-openssl-1.2.6-3.2.s390x.rpm xmlsec1-openssl-devel-1.2.6-3.2.s390x.rpm x86_64: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-1.2.6-3.2.x86_64.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.x86_64.rpm xmlsec1-devel-1.2.6-3.2.x86_64.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.x86_64.rpm xmlsec1-openssl-devel-1.2.6-3.2.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: Source: i386: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-devel-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-devel-1.2.6-3.2.i386.rpm x86_64: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-1.2.6-3.2.x86_64.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.x86_64.rpm xmlsec1-devel-1.2.6-3.2.x86_64.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.x86_64.rpm xmlsec1-openssl-devel-1.2.6-3.2.x86_64.rpm Red Hat EnterpriseLinux ES version 4: Source: i386: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-devel-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-devel-1.2.6-3.2.i386.rpm ia64: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-1.2.6-3.2.ia64.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.ia64.rpm xmlsec1-devel-1.2.6-3.2.ia64.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.ia64.rpm xmlsec1-openssl-devel-1.2.6-3.2.ia64.rpm x86_64: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-1.2.6-3.2.x86_64.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.x86_64.rpm xmlsec1-devel-1.2.6-3.2.x86_64.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.x86_64.rpm xmlsec1-openssl-devel-1.2.6-3.2.x86_64.rpm Red Hat Enterprise Linux WS version 4: Source: i386: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-devel-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-devel-1.2.6-3.2.i386.rpm ia64: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-1.2.6-3.2.ia64.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.ia64.rpm xmlsec1-devel-1.2.6-3.2.ia64.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.ia64.rpm xmlsec1-openssl-devel-1.2.6-3.2.ia64.rpm x86_64: xmlsec1-1.2.6-3.2.i386.rpm xmlsec1-1.2.6-3.2.x86_64.rpm xmlsec1-debuginfo-1.2.6-3.2.i386.rpm xmlsec1-debuginfo-1.2.6-3.2.x86_64.rpm xmlsec1-devel-1.2.6-3.2.x86_64.rpm xmlsec1-openssl-1.2.6-3.2.i386.rpm xmlsec1-openssl-1.2.6-3.2.x86_64.rpm xmlsec1-openssl-devel-1.2.6-3.2.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5client): Source: i386: xmlsec1-1.2.9-8.1.2.i386.rpm xmlsec1-debuginfo-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-1.2.9-8.1.2.i386.rpm xmlsec1-nss-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-1.2.9-8.1.2.i386.rpm x86_64: xmlsec1-1.2.9-8.1.2.i386.rpm xmlsec1-1.2.9-8.1.2.x86_64.rpm xmlsec1-debuginfo-1.2.9-8.1.2.i386.rpm xmlsec1-debuginfo-1.2.9-8.1.2.x86_64.rpm xmlsec1-gnutls-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-1.2.9-8.1.2.x86_64.rpm xmlsec1-nss-1.2.9-8.1.2.i386.rpm xmlsec1-nss-1.2.9-8.1.2.x86_64.rpm xmlsec1-openssl-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-1.2.9-8.1.2.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: xmlsec1-debuginfo-1.2.9-8.1.2.i386.rpm xmlsec1-devel-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.i386.rpm xmlsec1-nss-devel-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.i386.rpm x86_64: xmlsec1-debuginfo-1.2.9-8.1.2.i386.rpm xmlsec1-debuginfo-1.2.9-8.1.2.x86_64.rpm xmlsec1-devel-1.2.9-8.1.2.i386.rpm xmlsec1-devel-1.2.9-8.1.2.x86_64.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.x86_64.rpm xmlsec1-nss-devel-1.2.9-8.1.2.i386.rpm xmlsec1-nss-devel-1.2.9-8.1.2.x86_64.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: xmlsec1-1.2.9-8.1.2.i386.rpm xmlsec1-debuginfo-1.2.9-8.1.2.i386.rpm xmlsec1-devel-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.i386.rpm xmlsec1-nss-1.2.9-8.1.2.i386.rpm xmlsec1-nss-devel-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.i386.rpm ia64: xmlsec1-1.2.9-8.1.2.ia64.rpm xmlsec1-debuginfo-1.2.9-8.1.2.ia64.rpm xmlsec1-devel-1.2.9-8.1.2.ia64.rpm xmlsec1-gnutls-1.2.9-8.1.2.ia64.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.ia64.rpm xmlsec1-nss-1.2.9-8.1.2.ia64.rpm xmlsec1-nss-devel-1.2.9-8.1.2.ia64.rpm xmlsec1-openssl-1.2.9-8.1.2.ia64.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.ia64.rpm ppc: xmlsec1-1.2.9-8.1.2.ppc.rpm xmlsec1-1.2.9-8.1.2.ppc64.rpm xmlsec1-debuginfo-1.2.9-8.1.2.ppc.rpm xmlsec1-debuginfo-1.2.9-8.1.2.ppc64.rpm xmlsec1-devel-1.2.9-8.1.2.ppc.rpm xmlsec1-devel-1.2.9-8.1.2.ppc64.rpm xmlsec1-gnutls-1.2.9-8.1.2.ppc.rpm xmlsec1-gnutls-1.2.9-8.1.2.ppc64.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.ppc.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.ppc64.rpm xmlsec1-nss-1.2.9-8.1.2.ppc.rpm xmlsec1-nss-1.2.9-8.1.2.ppc64.rpm xmlsec1-nss-devel-1.2.9-8.1.2.ppc.rpm xmlsec1-nss-devel-1.2.9-8.1.2.ppc64.rpm xmlsec1-openssl-1.2.9-8.1.2.ppc.rpm xmlsec1-openssl-1.2.9-8.1.2.ppc64.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.ppc.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.ppc64.rpm s390x: xmlsec1-1.2.9-8.1.2.s390.rpm xmlsec1-1.2.9-8.1.2.s390x.rpm xmlsec1-debuginfo-1.2.9-8.1.2.s390.rpm xmlsec1-debuginfo-1.2.9-8.1.2.s390x.rpm xmlsec1-devel-1.2.9-8.1.2.s390.rpm xmlsec1-devel-1.2.9-8.1.2.s390x.rpm xmlsec1-gnutls-1.2.9-8.1.2.s390.rpm xmlsec1-gnutls-1.2.9-8.1.2.s390x.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.s390.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.s390x.rpm xmlsec1-nss-1.2.9-8.1.2.s390.rpm xmlsec1-nss-1.2.9-8.1.2.s390x.rpm xmlsec1-nss-devel-1.2.9-8.1.2.s390.rpm xmlsec1-nss-devel-1.2.9-8.1.2.s390x.rpm xmlsec1-openssl-1.2.9-8.1.2.s390.rpm xmlsec1-openssl-1.2.9-8.1.2.s390x.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.s390.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.s390x.rpm x86_64: xmlsec1-1.2.9-8.1.2.i386.rpm xmlsec1-1.2.9-8.1.2.x86_64.rpm xmlsec1-debuginfo-1.2.9-8.1.2.i386.rpm xmlsec1-debuginfo-1.2.9-8.1.2.x86_64.rpm xmlsec1-devel-1.2.9-8.1.2.i386.rpm xmlsec1-devel-1.2.9-8.1.2.x86_64.rpm xmlsec1-gnutls-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-1.2.9-8.1.2.x86_64.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.i386.rpm xmlsec1-gnutls-devel-1.2.9-8.1.2.x86_64.rpm xmlsec1-nss-1.2.9-8.1.2.i386.rpm xmlsec1-nss-1.2.9-8.1.2.x86_64.rpm xmlsec1-nss-devel-1.2.9-8.1.2.i386.rpm xmlsec1-nss-devel-1.2.9-8.1.2.x86_64.rpm xmlsec1-openssl-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-1.2.9-8.1.2.x86_64.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.i386.rpm xmlsec1-openssl-devel-1.2.9-8.1.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2011-1425 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2011 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFNwe6nXlSAg2UNWIIRAt03AJ9kIXZ9pSJD2MQvjEbjQf1frXFAWACgrV8L d75lCKqCYRNa7Kms5qwLLAc=5V8A -----END PGP SIGNATURE----- . xmlsec1 distributions for Red Hat address important security vulnerabilities and fix numerous bugs, affecting several OS versions. Discover more details.. xmlsec1 Security Update, Red Hat Advisory, Security Impact. . LinuxSecurity.com Team

Calendar 2 May 05, 2011 Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorysecurity issueRed Hat

Red Hat: 2011:0486-01 Moderate: Xmlsec1 Security Bug Fix Update

Updated xmlsec1 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: xmlsec1 security and bug fix update Advisory ID: RHSA-2011:0486-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2011:0486.html Issue date: 2011-05-04 CVE Names: CVE-2011-1425 ==================================================================== 1. Summary: Updated xmlsec1 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: The XML Security Library is a C library based on libxml2 and OpenSSL that implements the XML Digital Signature and XML Encryption standards. A flaw was found in the way xmlsec1 handled XML files that contain an XSLT transformation specification. A specially-crafted XML file could cause xmlsec1 to create or overwrite an arbitrary file while performing the verification of a file's digital signature. (CVE-2011-1425) Red Hat would like to thank Nicolas Gr . Cautionary update for xmlsec1package addresses vulnerabilities on Red Hat Enterprise Linux 4 and 5 platforms.. xmlsec1 update, Red Hat advisory, security issue fix. . LinuxSecurity.com Team

Calendar 2 May 04, 2011 Red Hat
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here