-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-5a249b4214 2018-03-20 17:27:15.776799 --------------------------------------------------------------------------------
Name : cryptopp Product : Fedora 26 Version : 5.6.5 Release : 2.fc26 URL : http://www.cryptopp.com/ Summary : C++ class library of cryptographic schemes Description : Crypto++ Library is a free C++ class library of cryptographic schemes. See http://www.cryptopp.com/ for a list of supported algorithms.
One purpose of Crypto++ is to act as a repository of public domain (not copyrighted) source code. Although the library is copyrighted as a compilation, the individual files in it are in the public domain.
-------------------------------------------------------------------------------- Update Information:
Update cryptopp to 5.6.5 security release. * fixed CVE-2016-7420 (Issue 277, document NDEBUG for production/release) * fixed CVE-2016-7544 (Issue 302, avoid _malloca and _freea for MSC compilers) * Shipped library in recommended state backwards compatibility achieved with <config.compat> * improved Testing and QA -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1376698 - CVE-2016-7420 cryptopp: Library documentation lacks treatment of -DNDEBUG and Static Initialization [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1376698 [ 2 ] Bug #1376697 - CVE-2016-7420 cryptopp: Library documentation lacks treatment of -DNDEBUG and Static Initialization [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1376697 [ 3 ] Bug #1375180 - CryptoPP::CMAC_Base::Update assert failed with tegrarcm https://bugzilla.redhat.com/show_bug.cgi?id=1375180 [ 4 ] Bug #1401407 - Cryptopp 5.6.5 released, Fedora Rawhide currently on 5.6.3 https://bugzilla.redhat.com/show_bug.cgi?id=1401407 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade cryptopp' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------