Issued:

2011-08-31

Updated:

2011-08-31

RHEA-2011:1237 - xmlrpc-c enhancement update

Synopsis

xmlrpc-c enhancement update

Type/Severity

Product Enhancement Advisory

Topic

Updated xmrlpc-c packages that add an enhancement are now available for Red Hat Enterprise Linux 5.

Description

XML-RPC is a way to make remote procedure calls over the Internet. It converts procedure calls into XML documents, sends them to a remote server using the HTTP protocol, and gets back the response as XML. The xmlrpc-c package provides a modular implementation of XML-RPC for the C programming language.

This update adds the following enhancement:

• As a solution to a security issue, GSSAPI (Generic Security Services Application Program Interface) credential delegation was disabled in the libcurl library. As a consequence, applications using the xmlrpc-c package and relying on the delegation exhibited various issues and did not work properly. With this update, the GSSAPI_DELEGATION option has been introduced into xmlrpc-c in order to enable the credential delegation explicitly when applications need it. (BZ#729795)

Users of xmlrpc-c are advised to upgrade to these updated packages, which add this enhancement.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• xmlrpc-c-devel-1.16.24-1206.1840.el5_7.4.ppc.rpm
• xmlrpc-c-1.16.24-1206.1840.el5_7.4.src.rpm
• xmlrpc-c-apps-1.16.24-1206.1840.el5_7.4.ppc.rpm
• xmlrpc-c-1.16.24-1206.1840.el5_7.4.s390x.rpm
• xmlrpc-c-client++-1.16.24-1206.1840.el5_7.4.ppc64.rpm
• xmlrpc-c-1.16.24-1206.1840.el5_7.4.s390.rpm
• xmlrpc-c-client++-1.16.24-1206.1840.el5_7.4.ppc.rpm
• xmlrpc-c-c++-1.16.24-1206.1840.el5_7.4.ia64.rpm
• xmlrpc-c-apps-1.16.24-1206.1840.el5_7.4.s390x.rpm
• xmlrpc-c-client-1.16.24-1206.1840.el5_7.4.x86_64.rpm
• xmlrpc-c-client-1.16.24-1206.1840.el5_7.4.s390x.rpm
• xmlrpc-c-devel-1.16.24-1206.1840.el5_7.4.x86_64.rpm
• xmlrpc-c-apps-1.16.24-1206.1840.el5_7.4.ia64.rpm
• xmlrpc-c-1.16.24-1206.1840.el5_7.4.ia64.rpm
• xmlrpc-c-c++-1.16.24-1206.1840.el5_7.4.x86_64.rpm
• xmlrpc-c-client-1.16.24-1206.1840.el5_7.4.ppc64.rpm
• xmlrpc-c-1.16.24-1206.1840.el5_7.4.ppc64.rpm
• xmlrpc-c-c++-1.16.24-1206.1840.el5_7.4.ppc.rpm
• xmlrpc-c-devel-1.16.24-1206.1840.el5_7.4.s390x.rpm
• xmlrpc-c-devel-1.16.24-1206.1840.el5_7.4.ia64.rpm
• xmlrpc-c-client-1.16.24-1206.1840.el5_7.4.i386.rpm
• xmlrpc-c-client-1.16.24-1206.1840.el5_7.4.s390.rpm
• xmlrpc-c-client-1.16.24-1206.1840.el5_7.4.ia64.rpm
• xmlrpc-c-client++-1.16.24-1206.1840.el5_7.4.s390.rpm
• xmlrpc-c-1.16.24-1206.1840.el5_7.4.ppc.rpm
• xmlrpc-c-client++-1.16.24-1206.1840.el5_7.4.ia64.rpm
• xmlrpc-c-c++-1.16.24-1206.1840.el5_7.4.i386.rpm
• xmlrpc-c-c++-1.16.24-1206.1840.el5_7.4.ppc64.rpm
• xmlrpc-c-apps-1.16.24-1206.1840.el5_7.4.i386.rpm
• xmlrpc-c-devel-1.16.24-1206.1840.el5_7.4.s390.rpm
• xmlrpc-c-client-1.16.24-1206.1840.el5_7.4.ppc.rpm
• xmlrpc-c-client++-1.16.24-1206.1840.el5_7.4.i386.rpm
• xmlrpc-c-devel-1.16.24-1206.1840.el5_7.4.ppc64.rpm
• xmlrpc-c-1.16.24-1206.1840.el5_7.4.i386.rpm
• xmlrpc-c-c++-1.16.24-1206.1840.el5_7.4.s390x.rpm
• xmlrpc-c-apps-1.16.24-1206.1840.el5_7.4.x86_64.rpm
• xmlrpc-c-client++-1.16.24-1206.1840.el5_7.4.s390x.rpm
• xmlrpc-c-1.16.24-1206.1840.el5_7.4.x86_64.rpm
• xmlrpc-c-devel-1.16.24-1206.1840.el5_7.4.i386.rpm
• xmlrpc-c-client++-1.16.24-1206.1840.el5_7.4.x86_64.rpm
• xmlrpc-c-c++-1.16.24-1206.1840.el5_7.4.s390.rpm

Fixes

(none)

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.