--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-b93b991ea4
2016-06-30 19:57:05.714406
--------------------------------------------------------------------------------
Name : chkrootkit
Product : Fedora 24
Version : 0.50
Release : 8.fc24
URL :
http://www.chkrootkit.org
Summary : Tool to locally check for signs of a rootkit
Description :
chkrootkit is a tool to locally check for signs of a rootkit.
It contains:
* chkrootkit: shell script that checks system binaries for
rootkit modification.
* ifpromisc: checks if the network interface is in promiscuous mode.
* chklastlog: checks for lastlog deletions.
* chkwtmp: checks for wtmp deletions.
* chkproc: checks for signs of LKM trojans.
* chkdirs: checks for signs of LKM trojans.
* strings: quick and dirty strings replacement.
* chkutmp: checks for utmp deletions.
--------------------------------------------------------------------------------
Update Information:
Fix l2cap false positive. ---- Fix Windigo false positive.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1234420 - chkrootkit warnings - l2cap
https://bugzilla.redhat.com/show_bug.cgi?id=1234420
[ 2 ] Bug #1234436 - Bogus Windigo reports
https://bugzilla.redhat.com/show_bug.cgi?id=1234436
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update chkrootkit' at the command line.
For more information, refer to "Managing Software with yum",
available at
https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------