Advisories » MGASA-2014-0212

Updated ldns package fixes CVE-2014-3209

Publication date: 10 May 2014
Modification date: 10 May 2014
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2014-3209

Description

Updated ldns packages fix security vulnerability:

ldns-keygen creates a private key with the default permissions according
to the users umask, which in most cases will cause the private key to be
world-readable (CVE-2014-3209).
                

References

• http://openwall.com/lists/oss-security/2014/05/05/4
• https://bugs.mageia.org/show_bug.cgi?id=13324
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3209

SRPMS

3/core

• ldns-1.6.16-2.1.mga3

4/core

• ldns-1.6.16-3.1.mga4