Withdrawn by the publisher.

It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.

It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.

libICE-devel-1.0.10-1.8 on GA media

Security update for libICE

Affected: Ubuntu:Pro:16.04:LTS: libice, Ubuntu:18.04:LTS: libice

It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.