-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-8473 2009-08-11 21:51:54 --------------------------------------------------------------------------------
Name : xmlsec1 Product : Fedora 11 Version : 1.2.12 Release : 1.fc11 URL : http://www.aleksey.com/xmlsec/ Summary : Library providing support for "XML Signature" and "XML Encryption" standards Description : XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to support major XML security standards "XML Digital Signature" and "XML Encryption". -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 11 2009 Daniel Veillard <veill...@redhat.com> - 1.2.12-1 - update to new upstream release 1.2.12 - includes fix for CVE-2009-0217 - cleanup spec file -------------------------------------------------------------------------------- References: [ 1 ] Bug #511915 - CVE-2009-0217 xmlsec1, mono, xml-security-c, xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass https://bugzilla.redhat.com/show_bug.cgi?id=511915 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update xmlsec1' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce