Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 8: DLA-2006-1 Critical: Libxdmcp Weak Entropy Issue

debian lts
Calendar Grey November 25, 2019
Dist Debian Esm H88
Address the weak entropy issue in libxdmcp for improved key generation security. Important notice for Debian 8 users. It's advisable to upgrade now!
It has been found, that libxdmcp, an X11 Display Manager Control Protocol library, uses weak entropy to generate keys
Topics%20covered

Topics Covered

security advisory buffer overflow debian libxdmcp entropy flaw

Summary

Using arc4random_buf() from libbsd should avoid this flaw.


For Debian 8 "Jessie", this problem has been fixed in version
1:1.1.1-1+deb8u1.

We recommend that you upgrade your libxdmcp packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libxdmcp
Version: 1:1.1.1-1+deb8u1
CVE ID: CVE-2017-2625

Topics%20covered

Topics Covered

security advisory buffer overflow debian libxdmcp entropy flaw

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here