Stay Secure with the Latest Linux Advisories

security advisoryFedorasoftware upgrade

Fedora 25: FEDORA-2017-03954b6dc4 Critical Timing Attack Fix

Update to latest upstream release in order to fix CVE-2017-9735. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-03954b6dc4 2017-07-08 16:05:01.876275 --------------------------------------------------------------------------------Name : jetty-test-helper Product : Fedora 25 Version : 3.1 Release : 3.fc25 URL : https://github.com/jetty/jetty-toolchain Summary : Jetty toolchain test helper Description : Unit Testing Support for Jetty (common classes for some unit tests). --------------------------------------------------------------------------------Update Information: Update to latest upstream release in order to fix CVE-2017-9735 --------------------------------------------------------------------------------References: [ 1 ] Bug #1464158 - CVE-2017-9735 jetty: Timing channel attack in util/security/Password.java https://bugzilla.redhat.com/show_bug.cgi?id=1464158 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade jetty-test-helper' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . A resolution for the Timing Channel Attack vulnerability in the jetty-test-helper package of Fedora 25 has been implemented, enhancing system security and integrity. Fedora Security, Jetty Toolchain, Timing Attack Fix, Software Upgrade. . Severity: Critical. LinuxSecurity.com Team

Jul 08, 2017 •Critical Fedora