Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Chromedriver Moderate Security Issues Fixed 2026-10958-1

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed libmozjs Moderate Update CVE-2025-70103

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Perl HTML Parser Moderate CVE-2026-8829 Advisory

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed kernel-devel Moderate Security Issue 2026-10954-1

Calendar White Jun 08, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed Gleam Moderate Threat Fixed 2026-10953-1

Calendar White Jun 08, 2026
moderate
Ubuntu Large Esm H900
Ubuntu

Ubuntu 25.10 Systemd Critical Arbitrary Code Exec DNS Issues USN-8402-1

Calendar White Jun 08, 2026
Critical
Opensuse Large Esm H800
openSUSE

openSUSE Epiphany Important Password Handling Issue CVE-2023-26081

Calendar White Jun 08, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS 8399-1 Pillow Denial of Service Risk CVE-2026-42308

Calendar White Jun 08, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS Poppler Critical DoS Code Execution Vuln USN-8400-1

Calendar White Jun 08, 2026
Critical
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorymoderateFedora

Fedora 24: FEDORA-2017-001f135337 Moderate: bind-dyndb-ldap Security Update

Update back to ISC supported version. Security fix for CVE-2017-3143, CVE-2017-3142, CVE-2017-3140. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-001f135337 2017-07-11 18:56:33.196447 --------------------------------------------------------------------------------Name : bind-dyndb-ldap Product : Fedora 24 Version : 10.1 Release : 2.fc24 URL : https://pagure.io/bind-dyndb-ldap Summary : LDAP back-end plug-in for BIND Description : This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server. --------------------------------------------------------------------------------Update Information: Update back to ISC supported version. Security fix for CVE-2017-3143, CVE-2017-3142, CVE-2017-3140 --------------------------------------------------------------------------------References: [ 1 ] Bug #1466193 - CVE-2017-3143 bind: An error in TSIG authentication can permit unauthorized dynamic updates https://bugzilla.redhat.com/show_bug.cgi?id=1466193 [ 2 ] Bug #1461302 - CVE-2017-3140 bind: Error processing RPZ rules leads to endless loop while handling query https://bugzilla.redhat.com/show_bug.cgi?id=1461302 [ 3 ] Bug #1466189 - CVE-2017-3142 bind: An error in TSIG authentication can permit unauthorized zone transfers https://bugzilla.redhat.com/show_bug.cgi?id=1466189 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade bind-dyndb-ldap' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . The recent security patch for bind-dyndb-ldap in Fedora 24 resolves several vulnerabilities concerning dynamic updates and zone transfers.. bind-dyndb-ldap Security Update,Fedora 24 Update,Dyamic Updates Security,Zone Transfer Fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jul 12, 2017 •Important Fedora
200
Ls Advisories Scientific Esm H240
Price Tag 1security advisoryremote accesssecurity fix

Scientific Linux: SLSA-2017-1679-1 Critical: BIND TSIG Authentication Flaws

A flaw was found in the way BIND handled TSIG authentication for dynamic updates. A remote attacker able to communicate with an authoritative BIND server could use this flaw to manipulate the contents of a zone, by forging a valid TSIG or SIG(0) signature for a dynamic update request. (CVE-2017-3143) * A flaw was found in the way BIND handled TSIG authentication of AXFR requests. A remote att [More...]. Synopsis: Important: bind security and bug fix update Advisory ID: SLSA-2017:1679-1 Issue Date: 2017-07-05 CVE Numbers: CVE-2017-3142 CVE-2017-3143 -- Security Fix(es): * A flaw was found in the way BIND handled TSIG authentication for dynamic updates. A remote attacker able to communicate with an authoritative BIND server could use this flaw to manipulate the contents of a zone, by forging a valid TSIG or SIG(0) signature for a dynamic update request. (CVE-2017-3143) * A flaw was found in the way BIND handled TSIG authentication of AXFR requests. A remote attacker, able to communicate with an authoritative BIND server, could use this flaw to view the entire contents of a zone by sending a specially constructed request packet. (CVE-2017-3142) Bug Fix(es): * ICANN is planning to perform a Root Zone DNSSEC Key Signing Key (KSK) rollover during October 2017. Maintaining an up-to-date KSK, by adding the new root zone KSK, is essential for ensuring that validating DNS resolverscontinue to function following the rollover. -- SL6 x86_64 bind-debuginfo-9.8.2-0.62.rc1.el6_9.4.i686.rpm bind-debuginfo-9.8.2-0.62.rc1.el6_9.4.x86_64.rpm bind-libs-9.8.2-0.62.rc1.el6_9.4.i686.rpm bind-libs-9.8.2-0.62.rc1.el6_9.4.x86_64.rpm bind-utils-9.8.2-0.62.rc1.el6_9.4.x86_64.rpm bind-9.8.2-0.62.rc1.el6_9.4.x86_64.rpm bind-chroot-9.8.2-0.62.rc1.el6_9.4.x86_64.rpm bind-devel-9.8.2-0.62.rc1.el6_9.4.i686.rpm bind-devel-9.8.2-0.62.rc1.el6_9.4.x86_64.rpm bind-sdb-9.8.2-0.62.rc1.el6_9.4.x86_64.rpm i386 bind-debuginfo-9.8.2-0.62.rc1.el6_9.4.i686.rpm bind-libs-9.8.2-0.62.rc1.el6_9.4.i686.rpm bind-utils-9.8.2-0.62.rc1.el6_9.4.i686.rpm bind-9.8.2-0.62.rc1.el6_9.4.i686.rpm bind-chroot-9.8.2-0.62.rc1.el6_9.4.i686.rpm bind-devel-9.8.2-0.62.rc1.el6_9.4.i686.rpm bind-sdb-9.8.2-0.62.rc1.el6_9.4.i686.rpm - Scientific Linux Development Team . Crucial BIND security and bug correction release for Scientific Linux tackles vital vulnerabilities impacting dynamic updates.. BIND Fix, Scientific Linux Advisory, Authentication Issue. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 05, 2017 •Critical Scientific Linux
Banner 1 1028x280 1708121660 1771599717
200
Ls Advisories Scientific Esm H240
Price Tag 1security advisoryremote attackimportant

SciLinux: SLSA-2017:1680-1 Important: BIND Security Update for SL7

A flaw was found in the way BIND handled TSIG authentication for dynamic updates. A remote attacker able to communicate with an authoritative BIND server could use this flaw to manipulate the contents of a zone, by forging a valid TSIG or SIG(0) signature for a dynamic update request. (CVE-2017-3143) * A flaw was found in the way BIND handled TSIG authentication of AXFR requests. A remote att [More...]. Synopsis: Important: bind security and bug fix update Advisory ID: SLSA-2017:1680-1 Issue Date: 2017-07-05 CVE Numbers: CVE-2017-3142 CVE-2017-3143 -- Security Fix(es): * A flaw was found in the way BIND handled TSIG authentication for dynamic updates. A remote attacker able to communicate with an authoritative BIND server could use this flaw to manipulate the contents of a zone, by forging a valid TSIG or SIG(0) signature for a dynamic update request. (CVE-2017-3143) * A flaw was found in the way BIND handled TSIG authentication of AXFR requests. A remote attacker, able to communicate with an authoritative BIND server, could use this flaw to view the entire contents of a zone by sending a specially constructed request packet. (CVE-2017-3142) Bug Fix(es): * ICANN is planning to perform a Root Zone DNSSEC Key Signing Key (KSK) rollover during October 2017. Maintaining an up-to-date KSK, by adding the new root zone KSK, is essential for ensuring that validating DNS resolverscontinue to function following the rollover. -- SL7 x86_64 bind-debuginfo-9.9.4-50.el7_3.1.i686.rpm bind-debuginfo-9.9.4-50.el7_3.1.x86_64.rpm bind-libs-9.9.4-50.el7_3.1.i686.rpm bind-libs-9.9.4-50.el7_3.1.x86_64.rpm bind-libs-lite-9.9.4-50.el7_3.1.i686.rpm bind-libs-lite-9.9.4-50.el7_3.1.x86_64.rpm bind-utils-9.9.4-50.el7_3.1.x86_64.rpm bind-9.9.4-50.el7_3.1.x86_64.rpm bind-chroot-9.9.4-50.el7_3.1.x86_64.rpm bind-devel-9.9.4-50.el7_3.1.i686.rpm bind-devel-9.9.4-50.el7_3.1.x86_64.rpm bind-lite-devel-9.9.4-50.el7_3.1.i686.rpm bind-lite-devel-9.9.4-50.el7_3.1.x86_64.rpm bind-pkcs11-9.9.4-50.el7_3.1.x86_64.rpm bind-pkcs11-devel-9.9.4-50.el7_3.1.i686.rpm bind-pkcs11-devel-9.9.4-50.el7_3.1.x86_64.rpm bind-pkcs11-libs-9.9.4-50.el7_3.1.i686.rpm bind-pkcs11-libs-9.9.4-50.el7_3.1.x86_64.rpm bind-pkcs11-utils-9.9.4-50.el7_3.1.x86_64.rpm bind-sdb-9.9.4-50.el7_3.1.x86_64.rpm bind-sdb-chroot-9.9.4-50.el7_3.1.x86_64.rpm noarch bind-license-9.9.4-50.el7_3.1.noarch.rpm - Scientific Linux Development Team . Critical patch for BIND addressing remote exploit and authentication issues. Advisory ID: SLSA-2017:1681-2. BIND, Security Fix, SL7, Authentication Issues, Remote Access. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jul 05, 2017 •Important Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here