Search for packages
| purl | pkg:deb/debian/xmlsec1@1.2.6-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-12cg-us37-xbh8
Aliases: CVE-2011-1425 |
This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2012. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution. Please see the package list and CVE identifiers below for more information. |
Affected by 1 other vulnerability. |
|
VCID-k6xx-j2uv-67a9
Aliases: CVE-2017-1000061 |
xmlsec1: xmlsec vulnerable to external entity expansion |
Affected by 0 other vulnerabilities. |
|
VCID-xzye-g5rw-fyh5
Aliases: CVE-2009-3736 |
Multiple vulnerabilities have been found in GraphicsMagick, allowing remote attackers to execute arbitrary code or cause a Denial of Service condition. |
Affected by 2 other vulnerabilities. |
|
VCID-z7ht-bq8z-3qgd
Aliases: CVE-2009-0217 GHSA-8hfm-837h-hjg5 |
XML signature HMAC truncation authentication bypass This package uses a parameter that defines an HMAC truncation length (`HMACOutputLength`) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||