Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 2 articles for you...
172
security advisorydenial of servicesoftware updateUbuntu 22.04 LTS USN-7177-1: YARA Denial of Service Issue
YARA could be made to crash if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-7177-1 December 18, 2024 yara vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: YARA could be made to crash if it received specially crafted input. Software Description: - yara: Pattern matching swiss knife for malware researchers Details: It was discovered that YARA did not properly sanitize its configuration settings. An attacker could potentially exploit this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS libyara8 4.1.3-1ubuntu0.1~esm1 Available with Ubuntu Pro yara 4.1.3-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7177-1 CVE-2021-45429 . The Ubuntu Security Announcement USN-7178-1 addresses a vulnerability in Bind that impacts LTS releases, providing users with secure measures to rectify the issue.. Yara Update, Ubuntu LTS Security, Denial of Service Issue, Software Vulnerability. . Severity: Important. LinuxSecurity.com Team
Dec 18, 2024
•Important
Ubuntu
89
security advisorysoftware updateFedoraFedora 36: 2022-21cf5402fc Moderate: YARA 4.2.3 Malware Update
Update to yara-4.2.3 ---- Update to 4.2.0 ---- Update to 4.2.2. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-21cf5402fc 2022-08-17 01:05:09.336585 --------------------------------------------------------------------------------Name : yara Product : Fedora 36 Version : 4.2.3 Release : 1.fc36 URL : https://virustotal.github.io/yara/ Summary : Pattern matching Swiss knife for malware researchers Description : YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a Boolean expression which determine its logic. --------------------------------------------------------------------------------Update Information: Update to yara-4.2.3 ---- Update to 4.2.0 ---- Update to 4.2.2 --------------------------------------------------------------------------------ChangeLog: * Tue Aug 9 2022 Mikel Olasagasti Uranga - 4.2.3-1 - Update to 4.2.3 (#2116594) * Sat Jul 23 2022 Fedora Release Engineering - 4.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jul 18 2022 Mikel Olasagasti Uranga - 4.2.2-1 - Update to 4.2.2 (#2103444) - BUGFIX: Fix buffer overrun in "dex" module (#1728). - BUGFIX: Wrong offset used when checking Version string of .net metadata (#1708). - BUGFIX: YARA doesn't compile if --with-debug-verbose flag is enabled (#1719). - BUGFIX: Null-pointer dereferences while loading corrupted compiled rules (#1727). * Mon May 23 2022 Michal Ambroz - 4.2.1-1 - bump to 4.2.1 - adding changes based on proposal of Mikel Olasagasti Uranga: - change to BSD license as yara was relicensed in 2016 - minor changes to spec, like using https for URL - remove old patches - enable checks * Sat Mar 12 2022Michal Ambroz - 4.2.0-1 - bump to 4.2.0 * Thu Feb 17 2022 Michal Ambroz - 4.2.0-0.rc1.1 - bump to 4.2.0-rc1 --------------------------------------------------------------------------------References: [ 1 ] Bug #2112508 - Update yara to 4.2.2 https://bugzilla.redhat.com/show_bug.cgi?id=2112508 [ 2 ] Bug #2116289 - F36FailsToInstall: python3-yara https://bugzilla.redhat.com/show_bug.cgi?id=2116289 [ 3 ] Bug #2116594 - yara-4.2.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2116594 [ 4 ] Bug #2117081 - F36FailsToInstall: python3-yara https://bugzilla.redhat.com/show_bug.cgi?id=2117081 [ 5 ] Bug #2117161 - python-yara-4.2.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2117161 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-21cf5402fc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Aug 16, 2022
•Important
Fedora
89
security advisoryfedoraupdate informationFedora 30: YARA Security Update - Critical Malware Detection Fix
update to the bugfix release 3.9.0. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-c3627a0e7a 2019-04-10 02:47:32.732625 --------------------------------------------------------------------------------Name : yara Product : Fedora 30 Version : 3.9.0 Release : 1.fc30 URL : https://virustotal.github.io/yara/ Summary : Pattern matching Swiss knife for malware researchers Description : YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a Boolean expression which determine its logic. --------------------------------------------------------------------------------Update Information: update to the bugfix release 3.9.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #1660398 - CVE-2018-19974 CVE-2018-19975 CVE-2018-19976 yara: Multiple issues [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1660398 [ 2 ] Bug #1680203 - yara-3.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1680203 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-c3627a0e7a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list
Apr 09, 2019
•Critical
Fedora
89
security advisoryFedorabugfixFedora: 2017-1d46019681 Critical: Yara Bugfix for Malware Detection
bump to 3.6.3 release - bugfix CVE-2017-11328. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-1d46019681 2017-07-24 17:29:46.085217 --------------------------------------------------------------------------------Name : yara Product : Fedora 25 Version : 3.6.3 Release : 1.fc25 URL : https://virustotal.github.io/yara/ Summary : Pattern matching Swiss knife for malware researchers Description : YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a Boolean expression which determine its logic. --------------------------------------------------------------------------------Update Information: bump to 3.6.3 release - bugfix CVE-2017-11328 --------------------------------------------------------------------------------References: [ 1 ] Bug #1471490 - yara-3.6.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1471490 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade yara' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jul 25, 2017
•Critical
Fedora
89
security advisorycriticalFedoraFedora 25: 2017-fa52efdf32 Critical: yara Buffer Over-Read
Security fix for CVE-2017-9304, CVE-2017-9465. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-fa52efdf32 2017-07-11 18:56:33.226328 --------------------------------------------------------------------------------Name : yara Product : Fedora 25 Version : 3.6.2 Release : 1.fc25 URL : https://virustotal.github.io/yara/ Summary : Pattern matching Swiss knife for malware researchers Description : YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a Boolean expression which determine its logic. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-9304, CVE-2017-9465 --------------------------------------------------------------------------------References: [ 1 ] Bug #1459490 - CVE-2017-9465 yara: Buffer over-read in yr_arena_write_data function https://bugzilla.redhat.com/show_bug.cgi?id=1459490 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade yara' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jul 12, 2017
•Critical
Fedora
89
security advisorycritical issueFedoraFedora 24: Security Fix for Yara Critical Buffer Over-Read
Security fix for CVE-2017-9304, CVE-2017-9465. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-47487b1223 2017-07-11 18:56:33.205627 --------------------------------------------------------------------------------Name : yara Product : Fedora 24 Version : 3.6.2 Release : 1.fc24 URL : https://virustotal.github.io/yara/ Summary : Pattern matching Swiss knife for malware researchers Description : YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a Boolean expression which determine its logic. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-9304, CVE-2017-9465 --------------------------------------------------------------------------------References: [ 1 ] Bug #1459490 - CVE-2017-9465 yara: Buffer over-read in yr_arena_write_data function https://bugzilla.redhat.com/show_bug.cgi?id=1459490 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade yara' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jul 12, 2017
•Critical
Fedora
89
security advisoryfedorabuffer overflowFedora 26 2017-156d12fa2f Critical: Yara Buffer Overflow Fix
Security fix for CVE-2017-9304, CVE-2017-9465. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-156d12fa2f 2017-07-11 18:55:55.744367 --------------------------------------------------------------------------------Name : yara Product : Fedora 26 Version : 3.6.2 Release : 1.fc26 URL : https://virustotal.github.io/yara/ Summary : Pattern matching Swiss knife for malware researchers Description : YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a Boolean expression which determine its logic. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-9304, CVE-2017-9465 --------------------------------------------------------------------------------References: [ 1 ] Bug #1459490 - CVE-2017-9465 yara: Buffer over-read in yr_arena_write_data function https://bugzilla.redhat.com/show_bug.cgi?id=1459490 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade yara' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jul 11, 2017
•Critical
Fedora
89
security advisorymoderatefedoraFedora 25: FEDORA-2017-926e11c76e Moderate: YARA Security Fixes
Update to a bugfix release of yara.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-926e11c76e 2017-06-17 19:40:29.228745 --------------------------------------------------------------------------------Name : yara Product : Fedora 25 Version : 3.6.0 Release : 1.fc25 URL : https://virustotal.github.io/yara/ Summary : Pattern matching Swiss knife for malware researchers Description : YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a Boolean expression which determine its logic. --------------------------------------------------------------------------------Update Information: Update to a bugfix release of yara. --------------------------------------------------------------------------------References: [ 1 ] Bug #1440739 - CVE-2016-10210 CVE-2016-10211 CVE-2017-5923 CVE-2017-5924 yara: Multiple security issues [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1440739 [ 2 ] Bug #1451383 - CVE-2017-8929 yara: Use-after-free in sized_string_cmp function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1451383 [ 3 ] Bug #1451384 - CVE-2017-8929 yara: Use-after-free in sized_string_cmp function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1451384 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade yara' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jun 18, 2017
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!