SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2019:1407-1)

This update for bind fixes the following issues : Security issues fixed : CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones bsc1126069. CVE-2018-5745: Fixed a denial of service vulnerability if a trust anchor rolls over to an...

May 28, 2019—KB4499147 (OS Build 16299.1182)

None None...

[SECURITY] Fedora 30 Update: rubygem-activesupport-5.2.3-1.fc30

A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing...

March 26, 2019—KB4490481 (OS Build 17763.402)

None None...

March 19, 2019—KB4489893 (Preview of Monthly Rollup)

None None...

March 19, 2019—KB4489887 (Preview of Monthly Rollup)

None None...

March 19, 2019—KB4489892 (Preview of Monthly Rollup)

None None...

CVE-2019-6465

Controls for zone transfers may not be properly applied to Dynamically Loadable Zones DLZs if the zones are writable Versions affected: BIND 9.9.0 - 9.10.8-P1, 9.11.0 - 9.11.5-P2, 9.12.0 - 9.12.3-P2, and versions 9.9.3-S1 - 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 - 9.13.6 o...

UBUNTU-CVE-2019-6465

Controls for zone transfers may not be properly applied to Dynamically Loadable Zones DLZs if the zones are writable Versions affected: BIND 9.9.0 - 9.10.8-P1, 9.11.0 - 9.11.5-P2, 9.12.0 - 9.12.3-P2, and versions 9.9.3-S1 - 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 - 9.13.6 o...

The vulnerability of the Oracle Solaris operating system’s Zones component allows a attacker to gain access to protected information, modify file access rights, or cause service interruptions.

The vulnerability of the Oracle Solaris operating system’s Zones component is related to insufficient access control. Exploiting this vulnerability can allow an attacker to gain access to protected information, modify file access rights, or cause service interruptions...

The vulnerability of the Kernel Zones component of the Oracle Solaris operating system, which allows a intruder to trigger a service failure

The vulnerability of the Kernel Zones component of the Oracle Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Kernel Zones Virtualized NIC Driver in the Oracle Solaris operating system allows a hacker to gain access to protected information.

The vulnerability of the Kernel Zones Virtualized NIC Driver component in the Oracle Solaris operating system is related to insufficient access control. Exploiting this vulnerability could allow an attacker to gain access to protected information remotely...

UBUNTU-CVE-2019-6990

A stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a crafted Zone NAME to the index.php?view=zones&action=zoneImage&mid=1 URI...

Design/Logic Flaw

If named is configured to use Response Policy Zones RPZ an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0-9.11.1, 9.9.10-S1, 9.10.5-S1...

CVE-2017-3140

If named is configured to use Response Policy Zones RPZ an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0-9.11.1, 9.9.10-S1, 9.10.5-S1...

CVE-2017-3140

If named is configured to use Response Policy Zones RPZ an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0-9.11.1, 9.9.10-S1, 9.10.5-S1...

ALPINE-CVE-2017-3140

If named is configured to use Response Policy Zones RPZ an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0-9.11.1, 9.9.10-S1, 9.10.5-S1...

UBUNTU-CVE-2017-3140

If named is configured to use Response Policy Zones RPZ an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0-9.11.1, 9.9.10-S1, 9.10.5-S1...

CVE-2017-3140

If named is configured to use Response Policy Zones RPZ an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5, 9.11.0-9.11.1, 9.9.10-S1, 9.10.5-S1...

Cross site request forgery (csrf)

FreshDNS version 1.0.3 and earlier contains a Cross ite Request Forgery CSRF vulnerability in All authenticated API calls in index.php / class.manager.php that can result in Editing domains and zones with victim's privileges. This attack appear to be exploitable via Victim must open a website...