-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2012-13351 2012-10-30 21:45:56 --------------------------------------------------------------------------------
Name : mcrypt Product : Fedora EPEL 6 Version : 2.6.8 Release : 10.el6 URL : http://mcrypt.sourceforge.net/ Summary : Replacement for crypt() Description : MCrypt is a replacement for the old crypt() package and crypt(1) command, with extensions. It allows developers to use a wide range of encryption functions, without making drastic changes to their code. It allows users to encrypt files or data streams without having to be cryptographers.
-------------------------------------------------------------------------------- Update Information:
Apply workaround for CVE-2012-4527. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #867790 - CVE-2012-4527 mcrypt: stack-based buffer overflow by encryption / decryption of overly long file names https://bugzilla.redhat.com/show_bug.cgi?id=867790 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update mcrypt' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org