Stay Secure with the Latest Linux Advisories

security advisorycritical issueFedora

Fedora 24: Security Fix for Yara Critical Buffer Over-Read

Security fix for CVE-2017-9304, CVE-2017-9465. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-47487b1223 2017-07-11 18:56:33.205627 --------------------------------------------------------------------------------Name : yara Product : Fedora 24 Version : 3.6.2 Release : 1.fc24 URL : https://virustotal.github.io/yara/ Summary : Pattern matching Swiss knife for malware researchers Description : YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a Boolean expression which determine its logic. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-9304, CVE-2017-9465 --------------------------------------------------------------------------------References: [ 1 ] Bug #1459490 - CVE-2017-9465 yara: Buffer over-read in yr_arena_write_data function https://bugzilla.redhat.com/show_bug.cgi?id=1459490 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade yara' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. .Investigate the Fedora 24 Yara security patch addressing severe buffer over-read vulnerabilities and additional enhancements in malware identification utilities.. Fedora 24 Update, Yara Security Patch, Malware Research Tools. . LinuxSecurity.com Team

Jul 12, 2017 Fedora