Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 34 articles for you...
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorydenial of serviceupdate

Scientific Linux: SLSA-2017:0065-2 Critical: httpd Vulnerability Alert

Important: bind97 security update. Date: Mon, 16 Jan 2017 16:54:16 -0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Important: bind97 on SL5.x i386/x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Important: bind97 security update Advisory ID: SLSA-2017:0064-1 Issue Date: 2017-01-16 CVE Numbers: CVE-2016-9147 -- Security Fix(es): * A denial of service flaw was found in the way BIND handled a query response containing inconsistent DNSSEC information. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response. (CVE-2016-9147) -- SL5 x86_64 bind97-9.7.0-21.P2.el5_11.10.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.10.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.10.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.10.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.10.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.10.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.10.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.10.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.10.x86_64.rpm i386 bind97-9.7.0-21.P2.el5_11.10.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.10.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.10.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.10.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.10.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.10.i386.rpm - Scientific Linux Development Team . This notice pertains to a critical bind97 security enhancement for Scientific Linux in response to a vulnerability that could lead to service disruption.. bind97 Security Update, Scientific Linux Advisory, SL5.x Security Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 16, 2017 •Important Scientific Linux
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisoryimportantdoS

SciLinux: 2016:2142-1 Important: bind97 DoS Flaw Update

Important: bind97 security update. Date: Thu, 3 Nov 2016 16:12:55 -0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Important: bind97 on SL5.x i386/x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Important: bind97 security update Advisory ID: SLSA-2016:2142-1 Issue Date: 2016-11-02 CVE Numbers: CVE-2016-8864 -- Security Fix(es): * A denial of service flaw was found in the way BIND handled responses containing a DNAME answer. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response. (CVE-2016-8864) -- SL5 x86_64 bind97-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.9.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.9.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.9.x86_64.rpm i386 bind97-9.7.0-21.P2.el5_11.9.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.9.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.9.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.9.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.9.i386.rpm - Scientific Linux Development Team . Crucial bind97 security patch resolves a denial of service vulnerability on Scientific Linux SL5.x.. bind97 security update, denial of service, SL5 advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 03, 2016 •Important Scientific Linux
Banner 2 1028x280 1708121730 1 1771599631
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorydenial of serviceRed Hat

Red Hat: RHSA-2016:2142-01 Critical Update for BIND97 DoS Vulnerability

An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: bind97 security update Advisory ID: RHSA-2016:2142-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2016:2142.html Issue date: 2016-11-02 CVE Names: CVE-2016-8864 ==================================================================== 1. Summary: An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop Workstation (v. 5 client) - i386, x86_64 3. Description: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * A denial of service flaw was found in the way BIND handled responses containing a DNAME answer. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response. (CVE-2016-8864) Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Tony Finch (University of Cambridge) and Marco Davids(SIDN Labs) as the original reporters. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, the BIND daemon (named) will be restarted automatically. 5. Bugs fixed (https://bugzilla.redhat.com/): 1389652 - CVE-2016-8864 bind: assertion failure while handling responses containing a DNAME answer 6. Package List: Red Hat Enterprise Linux Desktop Workstation (v. 5 client): Source: bind97-9.7.0-21.P2.el5_11.9.src.rpm i386: bind97-9.7.0-21.P2.el5_11.9.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.9.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.9.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.9.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.9.i386.rpm x86_64: bind97-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.9.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.9.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.9.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: bind97-9.7.0-21.P2.el5_11.9.src.rpm i386: bind97-9.7.0-21.P2.el5_11.9.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.9.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.9.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.9.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.9.i386.rpm ia64: bind97-9.7.0-21.P2.el5_11.9.ia64.rpm bind97-chroot-9.7.0-21.P2.el5_11.9.ia64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.ia64.rpm bind97-devel-9.7.0-21.P2.el5_11.9.ia64.rpm bind97-libs-9.7.0-21.P2.el5_11.9.ia64.rpm bind97-utils-9.7.0-21.P2.el5_11.9.ia64.rpm ppc: bind97-9.7.0-21.P2.el5_11.9.ppc.rpm bind97-chroot-9.7.0-21.P2.el5_11.9.ppc.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.ppc.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.ppc64.rpm bind97-devel-9.7.0-21.P2.el5_11.9.ppc.rpm bind97-devel-9.7.0-21.P2.el5_11.9.ppc64.rpm bind97-libs-9.7.0-21.P2.el5_11.9.ppc.rpm bind97-libs-9.7.0-21.P2.el5_11.9.ppc64.rpm bind97-utils-9.7.0-21.P2.el5_11.9.ppc.rpm s390x: bind97-9.7.0-21.P2.el5_11.9.s390x.rpm bind97-chroot-9.7.0-21.P2.el5_11.9.s390x.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.s390.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.s390x.rpm bind97-devel-9.7.0-21.P2.el5_11.9.s390.rpm bind97-devel-9.7.0-21.P2.el5_11.9.s390x.rpm bind97-libs-9.7.0-21.P2.el5_11.9.s390.rpm bind97-libs-9.7.0-21.P2.el5_11.9.s390x.rpm bind97-utils-9.7.0-21.P2.el5_11.9.s390x.rpm x86_64: bind97-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.9.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.9.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.9.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2016-8864 https://access.redhat.com/security/updates/classification#important https://kb.isc.org/docs/aa-01434 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2016 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFYGhs5XlSAg2UNWIIRAuuvAKCPRQwoplrK9grbRWWbnQ7YwzjNcACfczui OdTNJjTRz4T6sInzlKm7+sc=DJTn -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Critical bind97 patch release for Red Hat Enterprise Linux 5 fixes DNAME vulnerability that may lead to service disruption.. Red Hat Enterprise Linux, bind97 Update, denial of service, Important Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 02, 2016 •Important Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorydenial of serviceupdate

Red Hat 5 RHSA-2016-2094-01 Important: bind97 Denial of Service

An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: bind97 security update Advisory ID: RHSA-2016:2094-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2016:2094.html Issue date: 2016-10-20 CVE Names: CVE-2016-2848 ==================================================================== 1. Summary: An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop Workstation (v. 5 client) - i386, x86_64 3. Description: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * A denial of service flaw was found in the way BIND handled packets with malformed options. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS packet. (CVE-2016-2848) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 After installing the update, the BIND daemon (named) will be restarted automatically. 5. Bugs fixed (https://bugzilla.redhat.com/): 1385450 - CVE-2016-2848 bind: assertion failure triggered by a packet with malformed options 6. Package List: Red Hat Enterprise Linux Desktop Workstation (v. 5 client): Source: bind97-9.7.0-21.P2.el5_11.8.src.rpm i386: bind97-9.7.0-21.P2.el5_11.8.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.8.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.8.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.8.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.8.i386.rpm x86_64: bind97-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.8.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.8.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.8.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: bind97-9.7.0-21.P2.el5_11.8.src.rpm i386: bind97-9.7.0-21.P2.el5_11.8.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.8.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.8.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.8.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.8.i386.rpm ia64: bind97-9.7.0-21.P2.el5_11.8.ia64.rpm bind97-chroot-9.7.0-21.P2.el5_11.8.ia64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.ia64.rpm bind97-devel-9.7.0-21.P2.el5_11.8.ia64.rpm bind97-libs-9.7.0-21.P2.el5_11.8.ia64.rpm bind97-utils-9.7.0-21.P2.el5_11.8.ia64.rpm ppc: bind97-9.7.0-21.P2.el5_11.8.ppc.rpm bind97-chroot-9.7.0-21.P2.el5_11.8.ppc.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.ppc.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.ppc64.rpm bind97-devel-9.7.0-21.P2.el5_11.8.ppc.rpm bind97-devel-9.7.0-21.P2.el5_11.8.ppc64.rpm bind97-libs-9.7.0-21.P2.el5_11.8.ppc.rpm bind97-libs-9.7.0-21.P2.el5_11.8.ppc64.rpm bind97-utils-9.7.0-21.P2.el5_11.8.ppc.rpm s390x: bind97-9.7.0-21.P2.el5_11.8.s390x.rpm bind97-chroot-9.7.0-21.P2.el5_11.8.s390x.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.s390.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.s390x.rpm bind97-devel-9.7.0-21.P2.el5_11.8.s390.rpm bind97-devel-9.7.0-21.P2.el5_11.8.s390x.rpm bind97-libs-9.7.0-21.P2.el5_11.8.s390.rpm bind97-libs-9.7.0-21.P2.el5_11.8.s390x.rpm bind97-utils-9.7.0-21.P2.el5_11.8.s390x.rpm x86_64: bind97-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.8.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.8.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2016-2848 https://access.redhat.com/security/updates/classification#important https://kb.isc.org/docs/aa-01433 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2016 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFYCS0pXlSAg2UNWIIRAsg9AJ9Q3vxszpe+FkZEBJKNE09RKSE4vACgrm35 Mx49kEMYgvSKaWy6TrOk1Ns=lLse -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Essential bind97 patch issued for Red Hat Enterprise Linux 5. Security classification: High, with comprehensive solution specifics included.. bind97 Update, Red Hat Security, Denial of Service Patch, BIND Security Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 20, 2016 •Important Red Hat
Banner 2 1028x280 1708121730 1 1771599631
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorydenial of servicesecurity update

Critical Risk of Service Interruption in bind97 on Scientific Linux

Important: bind97 security update. Date: Thu, 20 Oct 2016 21:26:52 -0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Important: bind97 on SL5.x i386/x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Important: bind97 security update Advisory ID: SLSA-2016:2094-1 Issue Date: 2016-10-20 CVE Numbers: CVE-2016-2848 -- Security Fix(es): * A denial of service flaw was found in the way BIND handled packets with malformed options. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS packet. (CVE-2016-2848) -- SL5 x86_64 bind97-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.8.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.8.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.8.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.8.x86_64.rpm i386 bind97-9.7.0-21.P2.el5_11.8.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.8.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.8.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.8.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.8.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.8.i386.rpm - Scientific Linux Development Team . An important patch for bind97 resolves a vulnerability that could lead to service disruption in Scientific Linux SL5.x environments.. bind97 update, Scientific Linux security, denial service exploit. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 20, 2016 •Important Scientific Linux
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorysecurity issueDoS

Scientific Linux SL5.x: SLSA-2016:1945-1 Important Bind97 DoS Issue

Important: bind97 security update. Date: Wed, 28 Sep 2016 20:11:44 -0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Kevin Hill Subject: Security ERRATA Important: bind97 on SL5.x i386/x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Important: bind97 security update Advisory ID: SLSA-2016:1945-1 Issue Date: 2016-09-28 CVE Numbers: CVE-2016-2776 -- Security Fix(es): * A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2016-2776) -- SL5 x86_64 bind97-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.7.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.7.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.7.x86_64.rpm i386 bind97-9.7.0-21.P2.el5_11.7.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.7.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.7.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.7.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.7.i386.rpm - Scientific Linux Development Team . A crucial patch has been launched to address a DoS vulnerability in bind97 specifically for Scientific Linux users. bind97 Security Update, Scientific Linux Advisory, DoS Flaw Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 28, 2016 •Important Scientific Linux
Banner 2 1028x280 1708121730 1 1771599631
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryred hatsecurity fix

Red Hat: RHSA-2016:1945-01 Important: bind97 DoS Attack Mitigation

An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: bind97 security update Advisory ID: RHSA-2016:1945-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2016:1945.html Issue date: 2016-09-28 CVE Names: CVE-2016-2776 ==================================================================== 1. Summary: An update for bind97 is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop Workstation (v. 5 client) - i386, x86_64 3. Description: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * A denial of service flaw was found in the way BIND constructed a response to a query that met certain criteria. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2016-2776) Red Hat would like to thank ISC for reporting this issue. 4. Solution: For details on how to apply this update,which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, the BIND daemon (named) will be restarted automatically. 5. Bugs fixed (https://bugzilla.redhat.com/): 1378380 - CVE-2016-2776 bind: assertion failure in buffer.c while building responses to a specifically constructed request 6. Package List: Red Hat Enterprise Linux Desktop Workstation (v. 5 client): Source: bind97-9.7.0-21.P2.el5_11.7.src.rpm i386: bind97-9.7.0-21.P2.el5_11.7.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.7.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.7.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.7.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.7.i386.rpm x86_64: bind97-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.7.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.7.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.7.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: bind97-9.7.0-21.P2.el5_11.7.src.rpm i386: bind97-9.7.0-21.P2.el5_11.7.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.7.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.7.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.7.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.7.i386.rpm ia64: bind97-9.7.0-21.P2.el5_11.7.ia64.rpm bind97-chroot-9.7.0-21.P2.el5_11.7.ia64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.ia64.rpm bind97-devel-9.7.0-21.P2.el5_11.7.ia64.rpm bind97-libs-9.7.0-21.P2.el5_11.7.ia64.rpm bind97-utils-9.7.0-21.P2.el5_11.7.ia64.rpm ppc: bind97-9.7.0-21.P2.el5_11.7.ppc.rpm bind97-chroot-9.7.0-21.P2.el5_11.7.ppc.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.ppc.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.ppc64.rpm bind97-devel-9.7.0-21.P2.el5_11.7.ppc.rpm bind97-devel-9.7.0-21.P2.el5_11.7.ppc64.rpm bind97-libs-9.7.0-21.P2.el5_11.7.ppc.rpm bind97-libs-9.7.0-21.P2.el5_11.7.ppc64.rpm bind97-utils-9.7.0-21.P2.el5_11.7.ppc.rpm s390x: bind97-9.7.0-21.P2.el5_11.7.s390x.rpm bind97-chroot-9.7.0-21.P2.el5_11.7.s390x.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.s390.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.s390x.rpm bind97-devel-9.7.0-21.P2.el5_11.7.s390.rpm bind97-devel-9.7.0-21.P2.el5_11.7.s390x.rpm bind97-libs-9.7.0-21.P2.el5_11.7.s390.rpm bind97-libs-9.7.0-21.P2.el5_11.7.s390x.rpm bind97-utils-9.7.0-21.P2.el5_11.7.s390x.rpm x86_64: bind97-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.7.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.7.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.7.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7.References: https://access.redhat.com/security/cve/CVE-2016-2776 https://access.redhat.com/security/updates/classification/#important https://kb.isc.org/docs/aa-01419 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2016 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD4DBQFX68WcXlSAg2UNWIIRAu7BAJiFBSdLVJ0nFFPGg+jM9HRgVolhAJ0UPHAW c/EkOoJyrtAoLrcLQD9cmA==mfCk -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Crucial bind97 patch for Red Hat Enterprise Linux 5 addresses denial of service vulnerability and strengthens overall security.. bind97 Security Update, DoS Fix, Red Hat Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 28, 2016 •Important Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorysecurity updatered hat

Red Hat EL 5 Advisory RHSA-2016:0458-01 Critical: Bind97 Denial Of Service

Updated bind97 packages that fix two security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: bind97 security update Advisory ID: RHSA-2016:0458-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2016:0458.html Issue date: 2016-03-16 CVE Names: CVE-2016-1285 CVE-2016-1286 ==================================================================== 1. Summary: Updated bind97 packages that fix two security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 3. Description: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A denial of service flaw was found in the way BIND parsed signature records for DNAME records. By sending a specially crafted query, a remote attacker could use this flaw to cause named to crash. (CVE-2016-1286) A denial of service flaw was found in the way BIND processed certain control channel input. A remote attacker able to send a malformed packet to the control channel could use this flaw to cause named to crash. (CVE-2016-1285) Red Hat would like to thank ISC forreporting these issues. All bind97 users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, the BIND daemon (named) will be restarted automatically. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1315674 - CVE-2016-1285 bind: malformed packet sent to rndc can trigger assertion failure 1315680 - CVE-2016-1286 bind: malformed signature records for DNAME records can trigger assertion failure 6. Package List: Red Hat Enterprise Linux (v. 5server): Source: bind97-9.7.0-21.P2.el5_11.6.src.rpm i386: bind97-9.7.0-21.P2.el5_11.6.i386.rpm bind97-chroot-9.7.0-21.P2.el5_11.6.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.6.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.6.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.6.i386.rpm bind97-utils-9.7.0-21.P2.el5_11.6.i386.rpm ia64: bind97-9.7.0-21.P2.el5_11.6.ia64.rpm bind97-chroot-9.7.0-21.P2.el5_11.6.ia64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.6.ia64.rpm bind97-devel-9.7.0-21.P2.el5_11.6.ia64.rpm bind97-libs-9.7.0-21.P2.el5_11.6.ia64.rpm bind97-utils-9.7.0-21.P2.el5_11.6.ia64.rpm ppc: bind97-9.7.0-21.P2.el5_11.6.ppc.rpm bind97-chroot-9.7.0-21.P2.el5_11.6.ppc.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.6.ppc.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.6.ppc64.rpm bind97-devel-9.7.0-21.P2.el5_11.6.ppc.rpm bind97-devel-9.7.0-21.P2.el5_11.6.ppc64.rpm bind97-libs-9.7.0-21.P2.el5_11.6.ppc.rpm bind97-libs-9.7.0-21.P2.el5_11.6.ppc64.rpm bind97-utils-9.7.0-21.P2.el5_11.6.ppc.rpm s390x: bind97-9.7.0-21.P2.el5_11.6.s390x.rpm bind97-chroot-9.7.0-21.P2.el5_11.6.s390x.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.6.s390.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.6.s390x.rpm bind97-devel-9.7.0-21.P2.el5_11.6.s390.rpm bind97-devel-9.7.0-21.P2.el5_11.6.s390x.rpm bind97-libs-9.7.0-21.P2.el5_11.6.s390.rpm bind97-libs-9.7.0-21.P2.el5_11.6.s390x.rpm bind97-utils-9.7.0-21.P2.el5_11.6.s390x.rpm x86_64: bind97-9.7.0-21.P2.el5_11.6.x86_64.rpm bind97-chroot-9.7.0-21.P2.el5_11.6.x86_64.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.6.i386.rpm bind97-debuginfo-9.7.0-21.P2.el5_11.6.x86_64.rpm bind97-devel-9.7.0-21.P2.el5_11.6.i386.rpm bind97-devel-9.7.0-21.P2.el5_11.6.x86_64.rpm bind97-libs-9.7.0-21.P2.el5_11.6.i386.rpm bind97-libs-9.7.0-21.P2.el5_11.6.x86_64.rpm bind97-utils-9.7.0-21.P2.el5_11.6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2016-1285 https://access.redhat.com/security/cve/CVE-2016-1286 https://access.redhat.com/security/updates/classification#important https://kb.isc.org/docs/aa-01352 https://kb.isc.org/docs/aa-01353 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2016 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFW6WFmXlSAg2UNWIIRAoo4AKC+PCJjjbcietOkWnnAy2tTVXbzJwCggefp /CRIFdSHQ1OZdkQHjsPaSGE=IPsF -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Crucial bind97 security patch for Red Hat Enterprise Linux 5 addresses two severe vulnerabilities. Immediate upgrade advised.. bind97 update, Red Hat advisory, patch management, denial of service, security measures. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 16, 2016 •Important Red Hat
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics