Skip to content
OpenAdvisories
Unscored RHSA-2011:0486 1 CVE

Red Hat Security Advisory: xmlsec1 security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 29

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as xmlsec1 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::as xmlsec1-debuginfo 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::as xmlsec1-devel 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::as xmlsec1-openssl 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::as xmlsec1-openssl-devel 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::desktop xmlsec1 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::desktop xmlsec1-debuginfo 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::desktop xmlsec1-devel 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::desktop xmlsec1-openssl 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::desktop xmlsec1-openssl-devel 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::es xmlsec1 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::es xmlsec1-debuginfo 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::es xmlsec1-devel 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::es xmlsec1-openssl 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::es xmlsec1-openssl-devel 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::ws xmlsec1 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::ws xmlsec1-debuginfo 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::ws xmlsec1-devel 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::ws xmlsec1-openssl 0:1.2.6-3.2
Red Hat · RHEL 4 enterprise_linux:4::ws xmlsec1-openssl-devel 0:1.2.6-3.2
Red Hat · RHEL 5 enterprise_linux:5::server xmlsec1 0:1.2.9-8.1.2
Red Hat · RHEL 5 enterprise_linux:5::server xmlsec1-debuginfo 0:1.2.9-8.1.2
Red Hat · RHEL 5 enterprise_linux:5::server xmlsec1-devel 0:1.2.9-8.1.2
Red Hat · RHEL 5 enterprise_linux:5::server xmlsec1-gnutls 0:1.2.9-8.1.2
Red Hat · RHEL 5 enterprise_linux:5::server xmlsec1-gnutls-devel 0:1.2.9-8.1.2
Red Hat · RHEL 5 enterprise_linux:5::server xmlsec1-nss 0:1.2.9-8.1.2
Red Hat · RHEL 5 enterprise_linux:5::server xmlsec1-nss-devel 0:1.2.9-8.1.2
Red Hat · RHEL 5 enterprise_linux:5::server xmlsec1-openssl 0:1.2.9-8.1.2
Red Hat · RHEL 5 enterprise_linux:5::server xmlsec1-openssl-devel 0:1.2.9-8.1.2

Vulnerabilities 1

  • Unscored —
    CVE-2011-1425 Public exploit

    xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, …

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=558480
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692133
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=700467
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0486.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-1425
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1425
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1425