November 2018 - Arch-security - lists.archlinux.org

[ASA-201811-22] samba: multiple issues
by Remi Gacogne 28 Nov '18

28 Nov '18

Arch Linux Security Advisory ASA-201811-22 ========================================== Severity: High Date : 2018-11-28 CVE-ID : CVE-2018-14629 CVE-2018-16841 CVE-2018-16851 CVE-2018-16852 CVE-2018-16853 CVE-2018-16857 Package : samba Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-823 Summary ======= The package samba before version 4.9.3-1 is vulnerable to multiple issues including denial of service and access restriction bypass. Resolution ========== Upgrade to 4.9.3-1. # pacman -Syu "samba>=4.9.3-1" The problems have been fixed upstream in version 4.9.3. Workaround ========== None. Description =========== - CVE-2018-14629 (denial of service) A denial of service security issue has been found in samba from 4.0.0 up to and including 4.9.2, where an unprivileged user can use the ldbadd tool to add DNS records to create a CNAME loop, causing infinite query recursion. - CVE-2018-16841 (denial of service) A double-free issue has been found in samba from 4.3.0 up to and including 4.9.2, where a user with a valid certificate or smart card can crash the Samba AD DC's KDC. When configured to accept smart-card authentication, Samba's KDC willcall talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process. There is no further vulnerability associated with this issue, merely a denial of service. - CVE-2018-16851 (denial of service) A NULL pointer de-reference issue has been found in samba from 4.0.0 up to and including 4.9.2, where a user able to read more than 256MB of LDAP entries can crash the Samba AD DC's LDAP server. - CVE-2018-16852 (denial of service) A NULL pointer de-reference issue has been found in samba from 4.9.0 up to and including 4.9.2, where a user able to create or modify dnsZone objects can crash the Samba AD DC's DNS management RPC server, DNS server or BIND9 when using Samba's DLZ plugin - CVE-2018-16853 (denial of service) A denial of service has been found in samba from 4.7.0 up to and including 4.9.2, where a user in a Samba AD domain can crash the MIT KDC by requesting an S4U2Self ticket. This only happens if Samba is build in a experimental and unsupported MIT Kerberos configuration. - CVE-2018-16857 (access restriction bypass) A security issue has been found in samba from 4.9.0 up to and including 4.9.2, where AD DC Configurations watching for bad passwords to restrict brute forcing in a window of more than 3 minutes may not watch for bad passwords at all. Impact ====== A remote authenticated user can crash a vulnerable samba server. A remote attacker can brute-force passwords without triggering the bad password lockout protection. References ========== https://download.samba.org/pub/samba/patches/security/samba-4.9.2-security-… https://www.samba.org/samba/security/CVE-2018-14629.html https://bugzilla.samba.org/show_bug.cgi?id=13600 https://github.com/samba-team/samba/commit/bf596c14c2462b9a15ea738ef4f32b3a… https://www.samba.org/samba/security/CVE-2018-16841.html https://bugzilla.samba.org/show_bug.cgi?id=13628 https://github.com/samba-team/samba/commit/6e84215d4aa7ef51096db3b187adbe22… https://www.samba.org/samba/security/CVE-2018-16851.html https://bugzilla.samba.org/show_bug.cgi?id=13674 https://github.com/samba-team/samba/commit/f33f52c366f7cf140f470de44579dcb7… https://www.samba.org/samba/security/CVE-2018-16852.html https://bugzilla.samba.org/show_bug.cgi?id=13669 https://github.com/samba-team/samba/commit/05f867db81f118215445f2c49eda4b9c… https://github.com/samba-team/samba/commit/c78ca8b9b48a19e71f4d6ddd2e300f28… https://www.samba.org/samba/security/CVE-2018-16853.html https://bugzilla.samba.org/show_bug.cgi?id=13571 https://github.com/samba-team/samba/commit/4aabfecd290cd2769376abf7f170e832… https://www.samba.org/samba/security/CVE-2018-16857.html https://bugzilla.samba.org/show_bug.cgi?id=13683 https://github.com/samba-team/samba/commit/862d4909eccd18942e3de8e8b0dc6e15… https://github.com/samba-team/samba/commit/4f86beeaf3408383385ee99a74520a80… https://github.com/samba-team/samba/commit/d12b02c78842786969557b9be7c953e9… https://github.com/samba-team/samba/commit/60b2cd50f4d0554cc5ca8c53b2d1fa89… https://security.archlinux.org/CVE-2018-14629 https://security.archlinux.org/CVE-2018-16841 https://security.archlinux.org/CVE-2018-16851 https://security.archlinux.org/CVE-2018-16852 https://security.archlinux.org/CVE-2018-16853 https://security.archlinux.org/CVE-2018-16857

1 0

[ASA-201811-21] powerdns-recursor: denial of service
by Remi Gacogne 28 Nov '18

28 Nov '18

Arch Linux Security Advisory ASA-201811-21 ========================================== Severity: Medium Date : 2018-11-28 CVE-ID : CVE-2018-16855 Package : powerdns-recursor Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-821 Summary ======= The package powerdns-recursor before version 4.1.8-1 is vulnerable to denial of service. Resolution ========== Upgrade to 4.1.8-1. # pacman -Syu "powerdns-recursor>=4.1.8-1" The problem has been fixed upstream in version 4.1.8. Workaround ========== None. Description =========== An issue has been found in PowerDNS Recursor versions from 4.1.0 up to and including 4.1.7, where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash. Impact ====== A remote attacker can cause a denial of service via a crafted query. References ========== https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-20… https://seclists.org/oss-sec/2018/q4/183 https://github.com/PowerDNS/pdns/commit/e412a949491886c13854587bbd06fa90ceb… https://security.archlinux.org/CVE-2018-16855

1 0

[ASA-201811-20] webkit2gtk: arbitrary code execution
by Remi Gacogne 23 Nov '18

23 Nov '18

Arch Linux Security Advisory ASA-201811-20 ========================================== Severity: Critical Date : 2018-11-22 CVE-ID : CVE-2018-4372 Package : webkit2gtk Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-819 Summary ======= The package webkit2gtk before version 2.22.4-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 2.22.4-1. # pacman -Syu "webkit2gtk>=2.22.4-1" The problem has been fixed upstream in version 2.22.4. Workaround ========== None. Description =========== Multiple memory corruption issues have been found in WebKitGTK+ versions prior to 2.22.4, possibly leading to arbitrary code execution while parsing crafted web content. Impact ====== A remote attacker can execute arbitrary code on the affected host via a crafted web content. References ========== https://webkitgtk.org/security/WSA-2018-0008.html https://webkitgtk.org/security/WSA-2018-0008.html#CVE-2018-4372 https://security.archlinux.org/CVE-2018-4372

1 0

[ASA-201811-19] flashplugin: arbitrary code execution
by Remi Gacogne 23 Nov '18

23 Nov '18

Arch Linux Security Advisory ASA-201811-19 ========================================== Severity: Critical Date : 2018-11-22 CVE-ID : CVE-2018-15981 Package : flashplugin Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-818 Summary ======= The package flashplugin before version 31.0.0.153-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 31.0.0.153-1. # pacman -Syu "flashplugin>=31.0.0.153-1" The problem has been fixed upstream in version 31.0.0.153. Workaround ========== None. Description =========== A type confusion vulnerability has been found in Adobe Flash Player versions prior to 31.0.0.153. Impact ====== A remote attacker can execute arbitrary code via a crafted Flash file. References ========== https://helpx.adobe.com/security/products/flash-player/apsb18-44.html https://security.archlinux.org/CVE-2018-15981

1 0

[ASA-201811-18] lib32-libtiff: multiple issues
by Remi Gacogne 23 Nov '18

23 Nov '18

Arch Linux Security Advisory ASA-201811-18 ========================================== Severity: High Date : 2018-11-20 CVE-ID : CVE-2017-9935 CVE-2017-11613 CVE-2017-18013 CVE-2018-5784 CVE-2018-7456 CVE-2018-8905 CVE-2018-10779 CVE-2018-10963 CVE-2018-18557 CVE-2018-18661 Package : lib32-libtiff Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-791 Summary ======= The package lib32-libtiff before version 4.0.10-1 is vulnerable to multiple issues including arbitrary code execution, denial of service and information disclosure. Resolution ========== Upgrade to 4.0.10-1. # pacman -Syu "lib32-libtiff>=4.0.10-1" The problems have been fixed upstream in version 4.0.10. Workaround ========== None. Description =========== - CVE-2017-9935 (arbitrary code execution) In LibTIFF before 4.0.10, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution. - CVE-2017-11613 (denial of service) In LibTIFF before 4.0.10, there is a denial of service vulnerability in the TIFFOpen function triggered by resource consumption via crafted input files. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer. - CVE-2017-18013 (denial of service) A null-pointer dereference issue has been found in libtiff before 4.0.10, in the TIFFPrintDirectory() function in tiffinfo.c, while parsing the "1 Strips: " section of a crafted image, as demonstrated by a tiffinfo tool crash. - CVE-2018-5784 (denial of service) In LibTIFF before 4.0.10, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries. - CVE-2018-7456 (denial of service) A null pointer dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF before 4.0.10 when using the tiffinfo tool to print crafted TIFF information. - CVE-2018-8905 (arbitrary code execution) In LibTIFF before 4.0.10, a heap-based buffer overflow (out-of-bounds write) occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by the tiff2ps tool. - CVE-2018-10779 (information disclosure) A heap-based out-of-bounds read has been found in libtiff before 4.0.10, in the TIFFWriteScanline() function. The issue is caused by a uint32_t overflow on 32-bit systems. - CVE-2018-10963 (denial of service) The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF before 4.0.10 allows remote attackers to cause a denial of service (assertion failure and application crash) via a crafted file. - CVE-2018-18557 (arbitrary code execution) LibTIFF before 4.0.10 (with JBIG enabled) decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size, which leads to a tif_jbig.c JBIGDecode out-of-bounds write. - CVE-2018-18661 (denial of service) A null-pointer dereference has been found in LibTIFF before 4.0.10 in the LZWDecode() function in the file tif_lzw.c. Impact ====== A remote attacker might be able to cause a denial of service or execute arbitrary code on the affected host via a crafted picture file. References ========== https://bugs.archlinux.org/task/60599 http://bugzilla.maptools.org/show_bug.cgi?id=2704 https://gitlab.com/libtiff/libtiff/commit/5848777bd7e4f465681a7c4d0acf96a1d… http://bugzilla.maptools.org/show_bug.cgi?id=2724 https://gitlab.com/libtiff/libtiff/commit/3719385a3fac5cfb20b487619a5f08abb… https://gitlab.com/libtiff/libtiff/commit/7a092f8af2568d61993a8cc2e7a35a998… http://bugzilla.maptools.org/show_bug.cgi?id=2770 https://gitlab.com/libtiff/libtiff/commit/c6f41df7b581402dfba3c19a1e3df4454… http://bugzilla.maptools.org/show_bug.cgi?id=2772 https://gitlab.com/libtiff/libtiff/commit/473851d211cf8805a161820337ca74cc9… https://gitlab.com/libtiff/libtiff/commit/be4c85b16e8801a16eec25e80eb9f3dd6… http://bugzilla.maptools.org/show_bug.cgi?id=2780 https://gitlab.com/libtiff/libtiff/commit/58a898cb4459055bb488ca815c23b880c… http://bugzilla.maptools.org/show_bug.cgi?id=2788 https://gitlab.com/libtiff/libtiff/commit/981e43ecae83935625c86c9118c0778c9… http://bugzilla.maptools.org/show_bug.cgi?id=2795 https://gitlab.com/libtiff/libtiff/commit/de144fd228e4be8aa484c3caf3d814b6f… https://bugs.chromium.org/p/project-zero/issues/detail?id=1697 https://gitlab.com/libtiff/libtiff/merge_requests/38 https://gitlab.com/libtiff/libtiff/commit/681748ec2f5ce88da5f9fa6831e1653e4… http://bugzilla.maptools.org/show_bug.cgi?id=2819 https://gitlab.com/libtiff/libtiff/commit/99b10edde9a0fc28cc0e7b7757aa18ac4… https://security.archlinux.org/CVE-2017-9935 https://security.archlinux.org/CVE-2017-11613 https://security.archlinux.org/CVE-2017-18013 https://security.archlinux.org/CVE-2018-5784 https://security.archlinux.org/CVE-2018-7456 https://security.archlinux.org/CVE-2018-8905 https://security.archlinux.org/CVE-2018-10779 https://security.archlinux.org/CVE-2018-10963 https://security.archlinux.org/CVE-2018-18557 https://security.archlinux.org/CVE-2018-18661

1 0

[ASA-201811-17] libtiff: multiple issues
by Santiago Torres-Arias 20 Nov '18

20 Nov '18

Arch Linux Security Advisory ASA-201811-17 ========================================== Severity: High Date : 2018-11-20 CVE-ID : CVE-2017-9935 CVE-2017-11613 CVE-2018-18557 CVE-2018-18661 Package : libtiff Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-790 Summary ======= The package libtiff before version 4.0.10-1 is vulnerable to multiple issues including arbitrary code execution and denial of service. Resolution ========== Upgrade to 4.0.10-1. # pacman -Syu "libtiff>=4.0.10-1" The problems have been fixed upstream in version 4.0.10. Workaround ========== None. Description =========== - CVE-2017-9935 (arbitrary code execution) In LibTIFF before 4.0.10, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution. - CVE-2017-11613 (denial of service) In LibTIFF before 4.0.10, there is a denial of service vulnerability in the TIFFOpen function triggered by resource consumption via crafted input files. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer. - CVE-2018-18557 (arbitrary code execution) LibTIFF before 4.0.10 (with JBIG enabled) decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size, which leads to a tif_jbig.c JBIGDecode out-of-bounds write. - CVE-2018-18661 (denial of service) A null-pointer dereference has been found in LibTIFF before 4.0.10 in the LZWDecode() function in the file tif_lzw.c. Impact ====== A remote attacker might be able to cause a denial of service or execute arbitrary code on the affected host via a crafted picture file. References ========== https://bugs.archlinux.org/task/60599 http://bugzilla.maptools.org/show_bug.cgi?id=2704 https://gitlab.com/libtiff/libtiff/commit/5848777bd7e4f465681a7c4d0acf96a1d… http://bugzilla.maptools.org/show_bug.cgi?id=2724 https://gitlab.com/libtiff/libtiff/commit/3719385a3fac5cfb20b487619a5f08abb… https://gitlab.com/libtiff/libtiff/commit/7a092f8af2568d61993a8cc2e7a35a998… https://bugs.chromium.org/p/project-zero/issues/detail?id=1697 https://gitlab.com/libtiff/libtiff/merge_requests/38 https://gitlab.com/libtiff/libtiff/commit/681748ec2f5ce88da5f9fa6831e1653e4… http://bugzilla.maptools.org/show_bug.cgi?id=2819 https://gitlab.com/libtiff/libtiff/commit/99b10edde9a0fc28cc0e7b7757aa18ac4… https://security.archlinux.org/CVE-2017-9935 https://security.archlinux.org/CVE-2017-11613 https://security.archlinux.org/CVE-2018-18557 https://security.archlinux.org/CVE-2018-18661

1 0

[ASA-201811-16] chromium: information disclosure
by Remi Gacogne 20 Nov '18

20 Nov '18

Arch Linux Security Advisory ASA-201811-16 ========================================== Severity: Medium Date : 2018-11-20 CVE-ID : CVE-2018-17478 Package : chromium Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-812 Summary ======= The package chromium before version 70.0.3538.110-1 is vulnerable to information disclosure. Resolution ========== Upgrade to 70.0.3538.110-1. # pacman -Syu "chromium>=70.0.3538.110-1" The problem has been fixed upstream in version 70.0.3538.110. Workaround ========== None. Description =========== An out of bounds memory access has been found in the V8 component of the chromium browser before 70.0.3538.110. Impact ====== A remote attacker can access sensitive information or crash the browser via a crafted web page. References ========== https://chromereleases.googleblog.com/2018/11/stable-channel-update-for-des… https://bugs.chromium.org/p/chromium/issues/detail?id=897512 https://security.archlinux.org/CVE-2018-17478

1 0

[ASA-201811-15] grafana: arbitrary filesystem access
by Jelle van der Waa 19 Nov '18

19 Nov '18

Arch Linux Security Advisory ASA-201811-15 ========================================== Severity: High Date : 2018-11-15 CVE-ID : CVE-2018-19039 Package : grafana Type : arbitrary filesystem access Remote : Yes Link : https://security.archlinux.org/AVG-811 Summary ======= The package grafana before version 5.3.4-1 is vulnerable to arbitrary filesystem access. Resolution ========== Upgrade to 5.3.4-1. # pacman -Syu "grafana>=5.3.4-1" The problem has been fixed upstream in version 5.3.4. Workaround ========== None. Description =========== Al security issue has been found in grafana before 5.3.3, that could allow any users with Editor or Admin permissions in Grafana to read any file that the Grafana process can read from the filesystem. Note, that in order to exploit this you would need to be logged in to the system as a legitimate user with Editor or Admin permissions. Impact ====== A remote, authenticated attacker is able to read any file that is accessible to the Grafana process. References ========== https://grafana.com/blog/2018/11/13/grafana-5.3.3-and-4.6.5-released-with-i… https://security.archlinux.org/CVE-2018-19039

1 0

[ASA-201811-14] patch: multiple issues
by Santiago Torres-Arias 17 Nov '18

17 Nov '18

Arch Linux Security Advisory ASA-201811-14 ========================================== Severity: High Date : 2018-11-12 CVE-ID : CVE-2018-6952 CVE-2018-1000156 Package : patch Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-808 Summary ======= The package patch before version 2.7.6-7 is vulnerable to multiple issues including arbitrary command execution and denial of service. Resolution ========== Upgrade to 2.7.6-7. # pacman -Syu "patch>=2.7.6-7" The problems have been fixed upstream but no release is available yet. Workaround ========== None. Description =========== - CVE-2018-6952 (denial of service) A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patches. - CVE-2018-1000156 (arbitrary command execution) An arbitrary command execution vulnerability has been found in patch versions prior to 2.7.7 when applying ed-style patches. Due to insufficient sanitization of the input patch stream, it is possible for a patch file to cause patch to pass certain ed scripts to the ed editor, which would run commands. This issue could be exploited to execute arbitrary commands as the user invoking patch against a specially crafted patch file, which could be leveraged to obtain elevated privileges. Impact ====== An attacker can execute arbitrary commands via a specially crafted patch file. References ========== https://bugs.archlinux.org/task/57526 https://savannah.gnu.org/bugs/?53133 https://git.savannah.gnu.org/cgit/patch.git/commit/?id=9c986353e420ead6e706… https://savannah.gnu.org/bugs/?53566 https://git.savannah.gnu.org/cgit/patch.git/commit/?id=123eaff0d5d1aebe1282… https://git.savannah.gnu.org/cgit/patch.git/commit/?id=3fcd042d26d70856e826… https://security.archlinux.org/CVE-2018-6952 https://security.archlinux.org/CVE-2018-1000156

1 0

[ASA-201811-13] powerdns-recursor: denial of service
by Remi Gacogne 13 Nov '18

13 Nov '18

Arch Linux Security Advisory ASA-201811-13 ========================================== Severity: Medium Date : 2018-11-12 CVE-ID : CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 Package : powerdns-recursor Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-805 Summary ======= The package powerdns-recursor before version 4.1.5-1 is vulnerable to denial of service. Resolution ========== Upgrade to 4.1.5-1. # pacman -Syu "powerdns-recursor>=4.1.5-1" The problems have been fixed upstream in version 4.1.5. Workaround ========== None. Description =========== - CVE-2018-10851 (denial of service) An issue has been found in PowerDNS Authoritative Server before 4.1.5 and PowerDNS Recursor before 4.1.5. The issue is due to the fact that some memory is allocated before the parsing and is not always properly released if the record is malformed. In the authoritative server case, it allows an authorized user to cause a memory leak by inserting a specially crafted record in a zone under their control, then sending a DNS query for that record. In the case of the recursor, it allows a malicious authoritative server to cause a memory leak by sending specially crafted records. - CVE-2018-14626 (denial of service) An issue has been found in PowerDNS Authoritative Server before 4.1.5 and PowerDNS Recursor before 4.1.5, allowing a remote user to craft a DNS query that will cause an answer without DNSSEC records to be inserted into the packet cache and be returned to clients asking for DNSSEC records, thus hiding the presence of DNSSEC signatures for a specific qname and qtype. For a DNSSEC-signed domain, this means that DNSSEC validating clients will consider the answer to be bogus until it expires from the packet cache, leading to a denial of service. - CVE-2018-14644 (denial of service) An issue has been found in PowerDNS Recursor before 4.1.5 where a remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DNSSEC validation. It only arises if the parent zone is signed, and all the authoritative servers for that parent zone answer with FORMERR to a query for at least one of the meta-types. As a result, subsequent queries from clients requesting DNSSEC validation will be answered with a ServFail. Impact ====== A remote attacker authorized to send queries can force the recursor to serve answers without DNSSEC-related records to DNSSEC-enabled queries, or can trick the recursor into thinking an authoritative server does not handle EDNS correctly, causing validation failures. A remote attacker authorized to send queries and controlling a malicious authoritative server can crash the recursor by making it send queries to their server then replying with crafted answers. References ========== https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-20… https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-20… https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-20… https://docs.powerdns.com/authoritative/security-advisories/powerdns-adviso… https://docs.powerdns.com/authoritative/security-advisories/powerdns-adviso… https://security.archlinux.org/CVE-2018-10851 https://security.archlinux.org/CVE-2018-14626 https://security.archlinux.org/CVE-2018-14644

1 0