Stay Secure with the Latest Linux Advisories

security advisorydenial of servicefedora

Fedora 23: 2015-14954 Critical: Bind99 Denial Of Service Issues

Fixed https://bugzilla.redhat.com/show_bug.cgi?id=1259563 https://bugzilla.redhat.com/show_bug.cgi?id=1259691. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-14954 2015-09-06 01:09:10.073025 -------------------------------------------------------------------------------- Name : bind99 Product : Fedora 23 Version : 9.9.7 Release : 7.P3.fc23 URL : Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) libraries Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP. -------------------------------------------------------------------------------- Update Information: Fixed https://bugzilla.redhat.com/show_bug.cgi?id=1259563 https://bugzilla.redhat.com/show_bug.cgi?id=1259691 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1259085 - CVE-2015-5986 Bind: fromwire_openpgpkey() incorrect boundary check Denial of Service https://bugzilla.redhat.com/show_bug.cgi?id=1259085 [ 2 ] Bug #1259087 - CVE-2015-5722 bind: malformed DNSSEC key failed assertion denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1259087 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update bind99' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailinglist This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Essential security patch for bind99 resolves Denial of Service vulnerabilities impacting users on Fedora 23. Find out more about the revisions implemented.. bind99 Security Update, Fedora 23 Update, DNS Libraries Fix. . Severity: Critical. LinuxSecurity.com Team

Sep 06, 2015 •Critical Fedora