-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2012-12842 2012-09-07 20:19:41 --------------------------------------------------------------------------------
Name : mcrypt Product : Fedora EPEL 6 Version : 2.6.8 Release : 9.el6 URL : http://mcrypt.sourceforge.net/ Summary : Replacement for crypt() Description : MCrypt is a replacement for the old crypt() package and crypt(1) command, with extensions. It allows developers to use a wide range of encryption functions, without making drastic changes to their code. It allows users to encrypt files or data streams without having to be cryptographers.
-------------------------------------------------------------------------------- Update Information:
Resolve buffer overflow in CVE-2012-4409. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #855029 - CVE-2012-4409 mcrypt: buffer overflow when processing encrypted file headers https://bugzilla.redhat.com/show_bug.cgi?id=855029 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update mcrypt' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org