Stay Secure with the Latest Linux Advisories

security advisoryfedorasoftware update

Fedora 28 FEDORA-2018-2b274689e8 Moderate: Hesiod DNS Fixes

Fix CVE-2016-10152 (hardcoded DNS fallback) Fix CVE-2016-10151 (weak SUID check) Move package to autosetup Resolves: #1332509 Resolves: #1332494. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-2b274689e8 2018-10-23 21:06:54.128811 --------------------------------------------------------------------------------Name : hesiod Product : Fedora 28 Version : 3.2.1 Release : 14.fc28 URL : None Summary : Shared libraries for querying the Hesiod naming service Description : Hesiod is a system which uses existing DNS functionality to provide access to databases of information that changes infrequently. It is often used to distribute information kept in the /etc/passwd, /etc/group, and /etc/printcap files, among others. --------------------------------------------------------------------------------Update Information: Fix CVE-2016-10152 (hardcoded DNS fallback) Fix CVE-2016-10151 (weak SUID check) Move package to autosetup Resolves: #1332509 Resolves: #1332494 --------------------------------------------------------------------------------ChangeLog: * Thu Oct 11 2018 Robbie Harwood - 3.2.1-14 - Fix CVE-2016-10152 (hardcoded DNS fallback) - Fix CVE-2016-10151 (weak SUID check) - Move package to autosetup * Fri Jul 13 2018 Fedora Release Engineering - 3.2.1-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri May 18 2018 Adam Williamson - 3.2.1-12 - Rebuild for new libidn --------------------------------------------------------------------------------References: [ 1 ] Bug #1332509 - hesiod: Weak SUID check allowing privilege elevation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1332509 [ 2 ] Bug #1332494 - hesiod: Use of hard-coded unsafe configuration if configuration file cannot be opened [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1332494 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-2b274689e8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Notification for Hesiod about persistent DNS vulnerabilities and inadequate SUID verifications found in Fedora 28. Ensure your system remains secure!. Hesiod Update, Fedora Package Fix, DNS Security, SUID Vulnerability, System Update. . LinuxSecurity.com Team

Oct 23, 2018 Fedora