[SECURITY] Fedora EPEL 5 Update: mcrypt-2.6.8-9.el5

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2012-12837 2012-09-07 20:19:28 -------------------------------------------------------------------------------- Name : mcrypt Product : Fedora EPEL 5 Version : 2.6.8 Release : 9.el5 URL : http://mcrypt.sourceforge.net/ Summary : Replacement for crypt() Description : MCrypt is a replacement for the old crypt() package and crypt(1) command, with extensions. It allows developers to use a wide range of encryption functions, without making drastic changes to their code. It allows users to encrypt files or data streams without having to be cryptographers. -------------------------------------------------------------------------------- Update Information: Resolve buffer overflow in CVE-2012-4409. -------------------------------------------------------------------------------- References: [ 1 ] Bug #855029 - CVE-2012-4409 mcrypt: buffer overflow when processing encrypted file headers https://bugzilla.redhat.com/show_bug.cgi?id=855029 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update mcrypt' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------