Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

Fedora 26: Security Update for python-sleekxmpp User Impersonation Issue

fedora
Calendar Grey April 12, 2017
Dist Fedora Esm H88
A security patch for python-sleekxmpp in Fedora 26 resolves a vulnerability related to user impersonation, along with guidance on how to install it.
Update to latest upstream release 1.3.2 to fix CVE-2017-5591 (rhbz#1421077)

Summary

SleekXMPP is a flexible XMPP library for python that allows you to

create clients, components or servers for the XMPP protocol. Plug-ins

can be create to cover every current or future XEP.

Update to latest upstream release 1.3.2 to fix CVE-2017-5591 (rhbz#1421077)

[ 1 ] Bug #1421077 - CVE-2017-5591 python-sleekxmpp: User impersonation vulnerability [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1421077

su -c 'dnf upgrade python-sleekxmpp' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 26
Version: 1.3.2
Release: 1.fc26
Summary: Flexible XMPP client/component/server library for Python

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here