Summary
[1.2.20-7]
- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk
[1.2.20-6]
- CVE-2017-1000061
- Resolves: #1472092
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | xmlsec1 | 0:1.2.20-7.el7_4 |
| Oracle Linux · 7 | xmlsec1-devel | 0:1.2.20-7.el7_4 |
| Oracle Linux · 7 | xmlsec1-gcrypt | 0:1.2.20-7.el7_4 |
| Oracle Linux · 7 | xmlsec1-gcrypt-devel | 0:1.2.20-7.el7_4 |
| Oracle Linux · 7 | xmlsec1-gnutls | 0:1.2.20-7.el7_4 |
| Oracle Linux · 7 | xmlsec1-gnutls-devel | 0:1.2.20-7.el7_4 |
| Oracle Linux · 7 | xmlsec1-nss | 0:1.2.20-7.el7_4 |
| Oracle Linux · 7 | xmlsec1-nss-devel | 0:1.2.20-7.el7_4 |
| Oracle Linux · 7 | xmlsec1-openssl | 0:1.2.20-7.el7_4 |
| Oracle Linux · 7 | xmlsec1-openssl-devel | 0:1.2.20-7.el7_4 |
Vulnerabilities 1
-
Unscored —
xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting…