UbuntuUpdates.org

Package "ldns"

Name: ldns

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • ldns library for DNS programming
  • ldns library for DNS programming
  • ldns library for DNS programming (debug symbols)
Latest version: 1.6.17-1ubuntu0.1
Release: trusty (14.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "ldns" in Trusty

Repository Area Version
base main 1.6.17-1
base universe 1.6.17-1
security universe 1.6.17-1ubuntu0.1
updates universe 1.6.17-1ubuntu0.1
updates main 1.6.17-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.6.17-1ubuntu0.1 2017-11-22 21:06:45 UTC

  ldns (1.6.17-1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect modes for private keys
    - d/patches/0003-bugfix-573-ldns-keygen-write-private-mode-0600.patch:
      write private keys with correct mode in examples/ldns-keygen.c.
    - CVE-2014-3209
  * SECURITY UPDATE: double free for answers > 4096
    - debian/patches/0004-bugfix-548-Double-free-for-answers-4096.patch:
      set answer_pkt in resolver.c.
    - No CVE number
  * SECURITY UPDATE: double-free in ldns_fget_token_l
    - debian/patches/CVE-2017-1000231.patch: check parse limit before t
      increment in parse.c.
    - CVE-2017-1000231
  * SECURITY UPDATE: double-free in ldns_str2rdf_long_str
    - debian/patches/CVE-2017-1000232.patch: free after reallocing to 0
      size in str2host.c.
    - CVE-2017-1000232

 -- Marc Deslauriers <email address hidden> Tue, 21 Nov 2017 13:12:52 -0500
CVE-2014-3209 The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the priva


About   -   Send Feedback to @ubuntu_updates