Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 0 articles for you...
172
security advisoryUbuntusensitive informationUbuntu 18.04 LTS, 16.04 ESM: USN-5257-1 Critical ldns Information Leak
ldns could be made to expose sensitive information if it received a specially crafted input.. =========================================================================Ubuntu Security Notice USN-5257-1 January 31, 2022 ldns vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 ESM Summary: ldns could be made to expose sensitive information if it received a specially crafted input. Software Description: - ldns: ldns library for DNS programming Details: It was discovered that ldns incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. (CVE-2020-19860, CVE-2020-19861) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: libldns2 1.7.0-3ubuntu4.1 Ubuntu 16.04 ESM: libldns1 1.6.17-8ubuntu0.1+esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5257-1 CVE-2020-19860, CVE-2020-19861 Package Information: https://launchpad.net/ubuntu/+source/ldns/1.7.0-3ubuntu4.1 . Ubuntu USN-5260-1 alerts users about vulnerabilities in the libx11 package across specific releases and recommends urgent patches.. ldns vulnerabilities, Ubuntu security update, sensitive data exposure. . Severity: Critical. LinuxSecurity.com Team
Jan 31, 2022
•Critical
Ubuntu
203
security advisorymoderateheap overflowMageia 8 MGASA-2021-0582 Moderate: ldns Heap Out-Of-Bound Issues
Heap out-of-bound read vulnerability in rr_frm_str_internal function Heap out-of-bound read vulnerability in ldns_nsec3_salt_data function Fixed time memory compare for Openssl 0.9.8 References: . MGASA-2021-0582 - Updated ldns packages fix security vulnerability Publication date: 23 Dec 2021 URL: https://advisories.mageia.org/MGASA-2021-0582.html Type: security Affected Mageia releases: 8 Heap out-of-bound read vulnerability in rr_frm_str_internal function Heap out-of-bound read vulnerability in ldns_nsec3_salt_data function Fixed time memory compare for Openssl 0.9.8 References: - https://bugs.mageia.org/show_bug.cgi?id=29776 - https://lists.fedoraproject.org/archives/list/
Dec 23, 2021
Mageia
202
security advisorymoderatesecurity issueopenSUSE Leap 15.1: openSUSE-SU-2020:0438-1 Moderate: ldns Issues
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for ldns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0438-1 Rating: moderate References: #1068709 #1068711 Cross-References: CVE-2017-1000231 CVE-2017-1000232 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ldns fixes the following issues: - CVE-2017-1000231: Fixed a buffer overflow during token parsing (bsc#1068711). - CVE-2017-1000232: Fixed a double-free vulnerability in str2host.c (bsc#1068709). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-438=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ldns-1.7.0-lp151.4.3.1 ldns-debuginfo-1.7.0-lp151.4.3.1 ldns-debugsource-1.7.0-lp151.4.3.1 ldns-devel-1.7.0-lp151.4.3.1 libldns2-1.7.0-lp151.4.3.1 libldns2-debuginfo-1.7.0-lp151.4.3.1 perl-DNS-LDNS-1.7.0-lp151.4.3.1 perl-DNS-LDNS-debuginfo-1.7.0-lp151.4.3.1 python3-ldns-1.7.0-lp151.4.3.1 python3-ldns-debuginfo-1.7.0-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2017-1000231.html https://www.suse.com/security/cve/CVE-2017-1000232.html https://bugzilla.suse.com/1068709 https://bugzilla.suse.com/1068711 -- . The most recent patch for openSUSE Leap 15.1 tackles two moderate-level security vulnerabilities within ldns, alongside guidance for installation procedures.. openSUSE Update, ldns Security Fix, BufferOverflow, Double-Free Issue, openSUSE Vulnerability. . LinuxSecurity.com Team
Apr 01, 2020
OpenSUSE
89
security advisoryfedorasoftware updateFedora 26: ldns Security Update for Memory Corruption Threats
Fix memory corruption in ldns_rr_new_frm_fp_l (#1511046) Fix memory corruption in ldns_str2rdf_long_str (#1511046). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-3915878e18 2018-02-27 16:51:55.486369 --------------------------------------------------------------------------------Name : ldns Product : Fedora 26 Version : 1.7.0 Release : 4.fc26 URL : https://www.nlnetlabs.nl/projects/ldns/about/ Summary : Low-level DNS(SEC) library with API Description : ldns is a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to (for instance) create or sign packets. --------------------------------------------------------------------------------Update Information: Fix memory corruption in ldns_rr_new_frm_fp_l (#1511046) Fix memory corruption in ldns_str2rdf_long_str (#1511046) --------------------------------------------------------------------------------References: [ 1 ] Bug #1510993 - CVE-2017-1000232 ldns: Memory corruption in ldns_str2rdf_long_str https://bugzilla.redhat.com/show_bug.cgi?id=1510993 [ 2 ] Bug #1510985 - CVE-2017-1000231 ldns: Memory corruption in ldns_rr_new_frm_fp_l https://bugzilla.redhat.com/show_bug.cgi?id=1510985 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade ldns' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announcemailing list --
Feb 27, 2018
•Important
Fedora
89
security advisorycriticalsoftware updateFedora 27: ldns Security Update FEDORA-2017-ffa8601413 Critical Exploit
Fix memory corruption in ldns_str2rdf_long_str, ldns_rr_new_frm_fp_l (#1511046). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-ffa8601413 2017-11-21 20:38:55.506347 --------------------------------------------------------------------------------Name : ldns Product : Fedora 27 Version : 1.7.0 Release : 9.fc27 URL : https://www.nlnetlabs.nl/projects/ldns/about/ Summary : Low-level DNS(SEC) library with API Description : ldns is a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to (for instance) create or sign packets. --------------------------------------------------------------------------------Update Information: Fix memory corruption in ldns_str2rdf_long_str, ldns_rr_new_frm_fp_l (#1511046) --------------------------------------------------------------------------------References: [ 1 ] Bug #1510985 - ldns: Memory corruption in ldns_rr_new_frm_fp_l https://bugzilla.redhat.com/show_bug.cgi?id=1510985 [ 2 ] Bug #1510993 - ldns: Memory corruption in ldns_str2rdf_long_str https://bugzilla.redhat.com/show_bug.cgi?id=1510993 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade ldns' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Nov 21, 2017
•Critical
Fedora
197
security advisorycriticaldebianDebian Wheezy: DLA-2034-3 Severe: Ldns Memory Corruption Vulnerability
A security vulnerability has been discovered in ldns, a library and collection of utilities for DNS programming. . Package : ldns Version : 1.6.13-1+deb7u2 CVE ID : CVE-2017-1000231 Debian Bug : 882015 A security vulnerability has been discovered in ldns, a library and collection of utilities for DNS programming. CVE-2017-1000231 The generic parser contained a double-free vulnerability which resulted in an application crash with unspecified impacts and attack vectors. For Debian 7 "Wheezy", these problems have been fixed in version 1.6.13-1+deb7u2. We recommend that you upgrade your ldns packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance ldns to resolve a double-free flaw, maintaining reliability and safeguarding Debian 7 Wheezy installations.. Debian LTS, ldns security, double-free issue, dns programming, upgrade recommendation. . Severity: Critical. LinuxSecurity.com Team
Nov 21, 2017
•Critical
Debian LTS
87
security advisorybuffer overflowremote exploitDebian: DSA-2353-1 Critical: Ldns Buffer Overflow Remote Exploit
David Wheeler discovered a buffer overflow in ldns's code to parse RR records, which could lead to the execution of arbitrary code. For the oldstable distribution (lenny), this problem has been fixed in . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2353-1
Nov 24, 2011
•Critical
Debian
202
security advisorybuffer overflowsecurity fixopenSUSE 11.4: 2011:1161-1 Important: LDNS Heap Overflow
An update that fixes one vulnerability is now available.. openSUSE Security Update: ldns (CVE-2011-3581) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1161-1 Rating: important References: #720277 Cross-References: CVE-2011-3581 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A boundary error in ldns_rr_new_frm_str_internal() could lead to a heap-based buffer overfow when processing RR records (CVE-2011-3581). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch ldns-5289 - openSUSE 11.3: zypper in -t patch ldns-5289 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libldns-devel-1.5.1-10.11.1 libldns1-1.5.1-10.11.1 - openSUSE 11.3 (i586 x86_64): libldns-devel-1.5.1-7.3.1 libldns1-1.5.1-7.3.1 References: https://www.suse.com/security/cve/CVE-2011-3581.html -- . Critical openSUSE patch addresses memory overflow vulnerability in ldns. Significant upgrade released for editions 11.3 and 11.4.. openSUSE Update, Buffer Overflow, LDNS Security Fix. . Severity: Important. LinuxSecurity.com Team
Oct 20, 2011
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!