[SECURITY] Fedora 30 Update: yara-3.10.0-2.fc30
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-a00b4760a0
2019-10-06 00:56:14.865046
--------------------------------------------------------------------------------
Name : yara
Product : Fedora 30
Version : 3.10.0
Release : 2.fc30
URL : http://VirusTotal.github.io/yara/
Summary : Pattern matching Swiss knife for malware researchers
Description :
YARA is a tool aimed at (but not limited to) helping malware researchers to
identify and classify malware samples. With YARA you can create descriptions
of malware families (or whatever you want to describe) based on textual or
binary patterns. Each description, a.k.a rule, consists of a set of strings
and a Boolean expression which determine its logic.
--------------------------------------------------------------------------------
Update Information:
bugfix bump to 3.10.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 27 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.10.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri May 3 2019 Michal Ambroz <rebus at, seznam.cz> - 3.10.0-1
- bump to 3.10.0 release (#1680204)
- Optimize integer range loops by exiting earlier when possible.
- Cache the result of PE module���s imphash function in order to improve performance.
- Harden virtual machine against malicious code.
- BUGFIX: ���xor��� modifier not working as expected if not accompanied by ���ascii���
(#1053).
- BUGFIX: \s and \S character classes in regular expressions now include vertical tab, new
line, carriage return and form feed characters.
- BUGFIX: Regression bug in hex strings containing wildcards (#1025).
- BUGFIX: Buffer overrun in ���elf��� module.
- BUGFIX: Buffer overrun in ���dotnet��� module.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1660398 - CVE-2018-19974 CVE-2018-19975 CVE-2018-19976 yara: Multiple issues
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1660398
[ 2 ] Bug #1680203 - yara-3.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1680203
[ 3 ] Bug #1748557 - Please update to 3.10
https://bugzilla.redhat.com/show_bug.cgi?id=1748557
[ 4 ] Bug #1660399 - CVE-2018-19974 CVE-2018-19975 CVE-2018-19976 yara: Multiple issues
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1660399
[ 5 ] Bug #1705760 - yara-3.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1705760
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-a00b4760a0' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------