Find XMLTooling-C Version

[Rhys Smith]

> On 21 Jan 2018, at 07:02, mpopatia <musab at stellic.com> wrote:
> 
> Hello, 
> 
> On Linux (Debian 8), as a Shibboleth SP, how can I check the version of
> XMLTooling-C 
> that I am running currently? This is regarding the CVE-2018-0486 vulnerability. 

On the box, just run:
dpkg -l | grep xmltooling

(that’s dpkg - (lower case L))


If you’re running 1.5.3-2+deb8u2, you’re running the patched version.

E.g. on one of my jessie servers:

# dpkg -l | grep xmltooling
ii  libxmltooling6:amd64           1.5.3-2+deb8u2                   amd64        C++ XML parsing library with encryption support (runtime)
ii  libxmltooling7:amd64           1.6.0-3~bpo8+2                   amd64        C++ XML parsing library with encryption support (runtime)
ii  xmltooling-schemas             1.6.0-3~bpo8+2                   all          XML schemas for XMLTooling
--
Dr Rhys Smith
Chief Technical Architect, Trust & Identity
Jisc

T: +44 (0) 1235 822145
M: +44 (0) 7968 087821
Skype: rhys-smith
GPG: 0x4638C985
Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

> 
> 
> Thanks. 
> 
> 
> 
> --
> Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>