Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Fedora 22: 2015-14958 Critical Update For Bind99 Denial of Service

fedora
Calendar Grey September 24, 2015
Scroller Fedora
Essential patch for Fedora 22 tackling Denial of Service vulnerabilities found in bind99, incorporating significant bug resolutions and pertinent documentation.
Fixed https://bugzilla.redhat.com/show_bug.cgi?id=1259563 https://bugzilla.redhat.com/show_bug.cgi?id=1259691

Summary

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. This package set contains only export

version of BIND libraries, that are used for building ISC DHCP.

Update Information:

Fixed https://bugzilla.redhat.com/show_bug.cgi?id=1259563 https://bugzilla.redhat.com/show_bug.cgi?id=1259691

Topics%20covered

Topics Covered

security advisory Fedora bind critical update Denial of Service

Change Log

References


[ 1 ] Bug #1259085 - CVE-2015-5986 Bind: fromwire_openpgpkey() incorrect boundary check Denial of Service https://bugzilla.redhat.com/show_bug.cgi?id=1259085 [ 2 ] Bug #1259087 - CVE-2015-5722 bind: malformed DNSSEC key failed assertion denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1259087

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update bind99' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: bind99
Product: Fedora 22
Version: 9.9.7
Release: 7.P3.fc22
URL: Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries

Topics%20covered

Topics Covered

security advisory Fedora bind critical update Denial of Service

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.