Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Fedora: 2017-97e65f13bb critical: python-sleekxmpp user impersonation

fedora
Calendar Grey April 12, 2017
Dist Fedora Esm H88
An important patch has been issued for python-sleekxmpp that tackles user impersonation issues in Fedora 24, ensuring enhanced protection with the newly launched update.
Update to latest upstream release 1.3.2 to fix CVE-2017-5591 (rhbz#1421077)

Summary

SleekXMPP is a flexible XMPP library for python that allows you to

create clients, components or servers for the XMPP protocol. Plug-ins

can be create to cover every current or future XEP.

Update to latest upstream release 1.3.2 to fix CVE-2017-5591 (rhbz#1421077)

[ 1 ] Bug #1421077 - CVE-2017-5591 python-sleekxmpp: User impersonation vulnerability [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1421077

su -c 'dnf upgrade python-sleekxmpp' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 24
Version: 1.3.2
Release: 1.fc24
Summary: Flexible XMPP client/component/server library for Python

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here