Red Hat Security AdvisoryRHSA-2011:0486
xmlsec1 security and bug fix update
Released 2011-05-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5.6.z server) xmlsec1-1.2.9-8.1.2, xmlsec1-1.2.9-8.1.2.i386, xmlsec1-1.2.9-8.1.2.ia64 +29
- Red Hat Enterprise Linux AS version 4 xmlsec1-1.2.6-3.2, xmlsec1-1.2.6-3.2.i386, xmlsec1-1.2.6-3.2.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 xmlsec1-1.2.6-3.2, xmlsec1-1.2.6-3.2.i386, xmlsec1-devel-1.2.6-3.2 +5
- Red Hat Enterprise Linux ES version 4 xmlsec1-1.2.6-3.2, xmlsec1-1.2.6-3.2.i386, xmlsec1-1.2.6-3.2.ia64 +9
- Red Hat Enterprise Linux WS version 4 xmlsec1-1.2.6-3.2, xmlsec1-1.2.6-3.2.i386, xmlsec1-1.2.6-3.2.ia64 +9
Fixes 1 record
Priority LOW 34
xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt outp…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.08057 · Published 2011-04-03 · Fixed CWE-264
