FEDORA-EPEL-2021-9cf47c841c — security update for python-yara and yara

stable

python-yara-4.1.0-1.el7 and yara-4.1.0-1.el7

FEDORA-EPEL-2021-9cf47c841c created by rebus 3 years ago for Fedora EPEL 7

Update to bugfix release 4.1.0 Security fix for CVE-2017-9438, CVE-2021-3402, CVE-2019-19648, CVE-2017-9438

This update has been submitted for testing by rebus.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

This update can be pushed to stable now if the maintainer wishes

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

Builds

python-yara-4.1.0-1.el7

yara-4.1.0-1.el7

BZ#1459012 CVE-2017-9438 yara: Stack consumption via a crafted rule mishandled in the _ur_re_emit function

BZ#1783442 CVE-2019-19648 yara: out-of-bounds memory access in macho_parse_file in macho/macho.c [epel-all]

BZ#1816729 yara-4.1.0 is available

BZ#1829621 python-yara-4.1.0 is available

BZ#1922242 yara: Multiple vulnerabilities fixed in yara 4.0.4 [fedora-all]

BZ#1922243 yara: Multiple vulnerabilities fixed in yara 4.0.4 [epel-all]

BZ#1930175 CVE-2021-3402 libyara: Integer overflow in libyara/modules/macho/macho.c via a malicious Mach-O file

BZ#1930176 CVE-2021-3402 yara: libyara: Integer overflow in libyara/modules/macho/macho.c via a malicious Mach-O file [fedora-all]

BZ#1930177 CVE-2021-3402 yara: libyara: Integer overflow in libyara/modules/macho/macho.c via a malicious Mach-O file [epel-all]

python-yara-4.1.0-1.el7

yara-4.1.0-1.el7

Automated Test Results

ignored