-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2009-0154 2009-07-29 22:24:59 --------------------------------------------------------------------------------

Name : xml-security-c Product : Fedora EPEL 5 Version : 1.5.1 Release : 1.el5 URL : http://santuario.apache.org/c/ Summary : C++ Implementation of W3C security standards for XML Description : The xml-security-c library is a C++ implementation of the XML Digital Signature specification. The library makes use of the Apache XML project's Xerces-C XML Parser and Xalan-C XSLT processor. The latter is used for processing XPath and XSLT transforms.

-------------------------------------------------------------------------------- Update Information:

Fixes CVE-2009-0217 (#511915) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #511915 - CVE-2009-0217 xmlsec1, mono, xml-security-c, xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass https://bugzilla.redhat.com/show_bug.cgi?id=511915 --------------------------------------------------------------------------------

This update can be installed with the "yum" update programs. Use su -c 'yum update xml-security-c' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------