Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 24: Security Advisory for libXdmcp Critical Session Key Issue

Security fix for CVE-2017-2625. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-bcb1999e65 2017-03-05 17:28:15.511158 -------------------------------------------------------------------------------- Name : libXdmcp Product : Fedora 24 Version : 1.1.2 Release : 5.fc24 URL : https://www.x.org/wiki/ Summary : X Display Manager Control Protocol library Description : X Display Manager Control Protocol library. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-2625 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1427716 - CVE-2017-2625 libXdmcp: weak entropy usage for session keys [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1427716 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libXdmcp' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Important security patch for Fedora 24's libXdmcp resolves low session key randomness. Update immediately.. libXdmcp Update,Fedora Security,Critical Update,Session Key Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Mar 05, 2017 •Critical Fedora