CVE-2008-1184

The CVE-2008-1184 issue affects the dnssec-tools package (libval DNSSEC validation library). The root cause is that libval does not adequately verify that the signing key is the APEX trust anchor, which could enable unspecified attacks. Public sources consistently tie the fix to the 1.3.2 release...

Fedora 8 : dnssec-tools-1.3.2-1.fc8 (2008-1771)

1.3.2 release which contains a small set of fixes over the 1.3 release. The biggest of these fixes is a patch to the libval DNSSEC validation library to ensure that the signature that validates it is a signature of the trust anchor itself. Note that Tenable Network Security has extracted the...

Fedora 7 : dnssec-tools-1.3.2-1.fc7 (2008-1758)

1.3.2 release which contains a small set of fixes over the 1.3 release. The biggest of these fixes is a patch to the libval DNSSEC validation library to ensure that the signature that validates it is a signature of the trust anchor itself. Note that Tenable Network Security has extracted the...