Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 4 articles for you...
89

Fedora 25: 2017-167cfa7b09 Critical: Bind99 TSIG Authentication Flaws

Update to new ISC supported version 9.9.10.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-167cfa7b09 2017-07-08 16:05:01.877291 --------------------------------------------------------------------------------Name : bind99 Product : Fedora 25 Version : 9.9.10 Release : 1.P2.fc25 URL : Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP. --------------------------------------------------------------------------------Update Information: Update to new ISC supported version 9.9.10. --------------------------------------------------------------------------------References: [ 1 ] Bug #1466612 - CVE-2017-3142 bind99: bind: An error in TSIG authentication can permit unauthorized zone transfers [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1466612 [ 2 ] Bug #1466610 - CVE-2017-3143 bind99: bind: An error in TSIG authentication can permit unauthorized dynamic updates [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1466610 [ 3 ] Bug #1461639 - CVE-2017-3140 bind99: bind: Error processing RPZ rules leads to endless loop while handling query [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1461639 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade bind99' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Boost your framework by applying the latest security patch from Fedora for bind99. Update to version 9.9.10 to enhance DNS reliability.. Bind DNS Update, Fedora Security Fix, ISC Supported Version, Zone Transfer Security, TSIG Authentication. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 08, 2017 Critical Fedora
89

Fedora 26: 2017-a354efc764 Critical: bind99 DoS and Assertion Problems

Security fix for CVE-2017-3136, CVE-2017-3137 and CVE-2017-3138. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-a354efc764 2017-04-19 16:59:44.108374 --------------------------------------------------------------------------------Name : bind99 Product : Fedora 26 Version : 9.9.9 Release : 5.P8.fc26 URL : Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-3136, CVE-2017-3137 and CVE-2017-3138 --------------------------------------------------------------------------------References: [ 1 ] Bug #1441125 - CVE-2017-3136 bind: Incorrect error handling causes assertion failure when using DNS64 with "break-dnssec yes;" https://bugzilla.redhat.com/show_bug.cgi?id=1441125 [ 2 ] Bug #1441133 - CVE-2017-3137 bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver https://bugzilla.redhat.com/show_bug.cgi?id=1441133 [ 3 ] Bug #1441137 - CVE-2017-3138 bind: REQUIRE assertion failure when null command string on control channel is received https://bugzilla.redhat.com/show_bug.cgi?id=1441137 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade bind99' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Important patch for bind99 resolving various vulnerabilities in data handling that could lead to system failures.. Fedora bind99 security fix, DNS DoS risk, assertion failure issue, BIND library update. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 19, 2017 Critical Fedora
89

Fedora 24: 2017-d0c9bf9508 Moderate: Bind99 DNS Assertion Crash Fix

Security fix for CVE-2017-3135 (unaffected), fixes regression made by CVE-2016-8864. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-d0c9bf9508 2017-03-05 17:28:15.511263 -------------------------------------------------------------------------------- Name : bind99 Product : Fedora 24 Version : 9.9.9 Release : 4.P6.fc24 URL : Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-3135 (unaffected), fixes regression made by CVE-2016-8864 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1420193 - CVE-2017-3135 bind: Assertion failure when using DNS64 and RPZ Can Lead to Crash https://bugzilla.redhat.com/show_bug.cgi?id=1420193 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade bind99' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . The latest release of Bind99 significantly boosts security by rectifying vulnerabilities in DNSoperations and enhancing overall resilience.. Bind99 Security Update,Fedora 24,DNS Protocol Issues. . LinuxSecurity.com Team

Calendar 2 Mar 05, 2017 Fedora
89

Fedora 25: 2018-9a34e567bc Vital: Bind10 DNS Security Update

Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-8f23f564ad 2017-01-16 15:59:40.609058 -------------------------------------------------------------------------------- Name : bind99 Product : Fedora 24 Version : 9.9.9 Release : 4.P5.fc24 URL : Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1411348 - CVE-2016-9131 bind: assertion failure while processing response to an ANY query https://bugzilla.redhat.com/show_bug.cgi?id=1411348 [ 2 ] Bug #1411367 - CVE-2016-9147 bind: assertion failure while handling a query response containing inconsistent DNSSEC information https://bugzilla.redhat.com/show_bug.cgi?id=1411367 [ 3 ] Bug #1411377 - CVE-2016-9444 bind: assertion failure while handling an unusually-formed DS record response https://bugzilla.redhat.com/show_bug.cgi?id=1411377 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade bind99' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Important security patch for Fedora 24 users targeting several BIND DNS flaws, crucial for safeguarding systems.. Bind99 Security Update,Fedora 24 Security,Critical Security Fix,DNS Risks,BIND Issues. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jan 16, 2017 Critical Fedora
89

Fedora 25: 2017-f44f2f5a48 Moderate: Bind99 Assertion Fixes

Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-f44f2f5a48 2017-01-14 00:22:37.172566 -------------------------------------------------------------------------------- Name : bind99 Product : Fedora 25 Version : 9.9.9 Release : 4.P5.fc25 URL : Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-9131, CVE-2016-9147, CVE-2016-9444 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1411348 - CVE-2016-9131 bind: assertion failure while processing response to an ANY query https://bugzilla.redhat.com/show_bug.cgi?id=1411348 [ 2 ] Bug #1411367 - CVE-2016-9147 bind: assertion failure while handling a query response containing inconsistent DNSSEC information https://bugzilla.redhat.com/show_bug.cgi?id=1411367 [ 3 ] Bug #1411377 - CVE-2016-9444 bind: assertion failure while handling an unusually-formed DS record response https://bugzilla.redhat.com/show_bug.cgi?id=1411377 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade bind99' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Essential security patches for bind99 on Fedora 25 rectifying various assertion vulnerabilities to enhance overall system robustness.. Bind DNS Update, Fedora Security Patch, Assertion Failures Bind, Security Fix Fedora 25. . LinuxSecurity.com Team

Calendar 2 Jan 14, 2017 Fedora
89

Fedora 25: 2016-567a5591e4 Critical: bind99 DNS Issues Fix

Security fix for CVE-2016-6170 ---- Security fix for CVE-2016-8864. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-567a5591e4 2016-11-19 18:59:18.603042 -------------------------------------------------------------------------------- Name : bind99 Product : Fedora 25 Version : 9.9.9 Release : 4.P4.fc25 URL : Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-6170 ---- Security fix for CVE-2016-8864 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1353563 - CVE-2016-6170 bind: Improper restriction of zone size limit https://bugzilla.redhat.com/show_bug.cgi?id=1353563 [ 2 ] Bug #1389652 - CVE-2016-8864 bind: assertion failure while handling responses containing a DNAME answer https://bugzilla.redhat.com/show_bug.cgi?id=1389652 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade bind99' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. . Important security patches have been released for bind99 to tackle vulnerabilities within DNS libraries in Fedora 25, specifically concerning CVE-2016-6170 and CVE-2016-8864.. bind99 Security,Fedora Updates,DNS Issues,CVE Fixes. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Nov 19, 2016 Critical Fedora
89

Debian 9: DEBIAN-2017-abcd1234ef Important: apache2 Security Leak

Update to the latest upstream version due to CVE-2016-2776. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-cca77daf70 2016-10-03 13:03:33.169956 -------------------------------------------------------------------------------- Name : bind99 Product : Fedora 24 Version : 9.9.9 Release : 2.P3.fc24 URL : Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP. -------------------------------------------------------------------------------- Update Information: Update to the latest upstream version due to CVE-2016-2776 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1378380 - CVE-2016-2776 bind: assertion failure in buffer.c while building responses to a specifically constructed request https://bugzilla.redhat.com/show_bug.cgi?id=1378380 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update bind99' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Keep abreast of the recent Fedora 24 security patch for bind99 that tackles CVE-2016-2776 and its implications.. Fedora Update, bind99 Fix, Critical Security. .Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 03, 2016 Important Fedora
89

Fedora 22: FEDORA-2016-161b73fc2c Moderate: Bind99 DNS Update

New version fixing CVE-2016-1285 CVE-2016-1286. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-161b73fc2c 2016-04-02 00:39:41.509524 -------------------------------------------------------------------------------- Name : bind99 Product : Fedora 22 Version : 9.9.8 Release : 4.P4.fc22 URL : Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP. -------------------------------------------------------------------------------- Update Information: New version fixing CVE-2016-1285 CVE-2016-1286 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1316446 - CVE-2016-1285 CVE-2016-1286 bind99: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1316446 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update bind99' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Fedora 22 has released an update to the bind99 package, mitigating CVE-2016-1285 and CVE-2016-1286 to bolster DNS protection.. Fedora Security,BIND DNS Update,CVE-2016-1285,CVE-2016-1286. . LinuxSecurity.com Team

Calendar 2 Apr 02, 2016 Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here