# Akka 2.5.16 Security Patch Released

**URL:** <https://discuss.akka.io/t/akka-2-5-16-security-patch-released/1993>\
**Category:** Akka Libraries\
**Tags:** announcement\
**Created:** [August 29, 2018, 7:34pm UTC](https://discuss.akka.io/t/akka-2-5-16-security-patch-released/1993 "2018-08-29T19:34:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![patriknw](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.akka.io/patriknw/32/89_2.png) [@patriknw](https://discuss.akka.io/u/patriknw)\
**Post date:** [August 29, 2018, 7:34pm UTC](https://discuss.akka.io/t/akka-2-5-16-security-patch-released/1993/1 "2018-08-29T19:34:51Z")

</div>

Dear hakkers,

We are pleased to announce a new patch release of Akka 2.5. It contains an important security fix for a vulnerability that affects Akka systems that use Akka Remoting/Cluster with TLS and have configured the TLS `random-number-generator` to `AES128CounterSecureRNG` or `AES256CounterSecureRNG`. An attacker would be able to compromise the communication if these random number generators are enabled. See the [security announcement](https://doc.akka.io/docs/akka/current/security/2018-08-29-aes-rng.html) for more details.

We would like to thank Rafał Sumisławski at NetworkedAssets for bringing this issue to our attention

Please subscribe to the [akka-security](https://groups.google.com/forum/#!forum/akka-security) mailing list to be notified promptly about future security issues.

A total of 5 issues were closed since 2.5.15. The complete list can be found on the [2.5.16](https://github.com/akka/akka/milestone/132?closed=1) milestone on github.

## Credits

For this release we had the help of 4 committers – thank you all very much!

```auto
commits added removed
      4 309 71 Patrik Nordwall
      1 10 10 promanski
      1 8 7 Rafał Sumisławski
      1 1 1 Paolo Rascunà~~~

Happy hakking!

– The Akka Team
```
