Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 24 FEDORA-2017-7e0ff7f73a Critical Log4j12 Deserialization

Security fix for CVE-2017-5645. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-7e0ff7f73a 2017-06-12 13:03:25.116756 --------------------------------------------------------------------------------Name : log4j12 Product : Fedora 24 Version : 1.2.17 Release : 19.fc24 URL : https://logging.apache.org/log4j/1.x/ Summary : Java logging package Description : Log4j is a tool to help the programmer output log statements to a variety of output targets. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-5645 --------------------------------------------------------------------------------References: [ 1 ] Bug #1443635 - CVE-2017-5645 log4j: Socket receiver deserialization vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1443635 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade log4j12' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Important security patch released for Fedora 24 targeting the log4j12 deserialization vulnerability. Ensure your systems are secured against potential attacks.. Fedora Update, Log4j12 Security Fix, Socket Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Jun 12, 2017 •Critical Fedora