Red Hat Security AdvisoryRHSA-2013:1217
xml-security security update
Released 2013-09-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS xml-security-1.5.1-3_patch01.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES xml-security-1.5.1-3_patch01.ep5.el4
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server xml-security-1.5.1-3_patch01.ep5.el5
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server xml-security-1.5.1-3_patch01.ep5.el6
Fixes 1 record
Priority LOW 29
jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the Canon…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0593 · Published 2013-08-20 · Partial fix · 1.4.8, 1.5.5 CWE-310
