Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 26: FEDORA-2017-b8358cda24 Critical: Log4j Socket Receiver Issue

Security fix for CVE-2017-5645. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-b8358cda24 2017-06-09 18:48:36.549477 --------------------------------------------------------------------------------Name : log4j12 Product : Fedora 26 Version : 1.2.17 Release : 19.fc26 URL : https://logging.apache.org/log4j/1.x/ Summary : Java logging package Description : Log4j is a tool to help the programmer output log statements to a variety of output targets. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-5645 --------------------------------------------------------------------------------References: [ 1 ] Bug #1443635 - CVE-2017-5645 log4j: Socket receiver deserialization vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1443635 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade log4j12' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Important security patch for Fedora 26 mitigating log4j socket receiver deserialization vulnerability. Update immediately!. log4j security update,Fedora 26,deserialization threat,socket receiver,software upgrade. . Severity: Critical. LinuxSecurity.com Team

Jun 09, 2017 •Critical Fedora