Stay Secure with the Latest Linux Advisories

security advisorymoderateFedora

Fedora 23: 2016-7e817cbf55 Moderate: slock Crash Due To Invalid Hash

This release fixes CVE-2016-6866, a crash when verifying a password for a user without a valid shadow hash entry.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-7e817cbf55 2016-09-09 16:20:23.689401 -------------------------------------------------------------------------------- Name : slock Product : Fedora 23 Version : 1.3 Release : 2.fc23 URL : http://tools.suckless.org/slock/ Summary : Simple X display locker Description : This is the simplest X screen locker we are aware of. It is stable and quite a lot people in this community are using it every day when they are out with friends or fetching some food from the local pub. -------------------------------------------------------------------------------- Update Information: This release fixes CVE-2016-6866, a crash when verifying a password for a user without a valid shadow hash entry. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1368369 - CVE-2016-6866 slock: Null pointer dereference results in segmentation fault https://bugzilla.redhat.com/show_bug.cgi?id=1368369 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update slock' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Fedora 23 slock patch resolves bug causing crashes during password verification if no shadow hash entry ispresent.. Fedora 23 Update,slock Security Fix,software vulnerability,password verification issue. . LinuxSecurity.com Team

Sep 09, 2016 Fedora