U radu programskog paketa BIND uočen je i ispravljen sigurnosni propust kojeg napadač može iskoristiti za izvođenje DoS napada (rušenje aplikacije).

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7602
2011-05-27 19:56:34
--------------------------------------------------------------------------------

Name        : bind
Product     : Fedora 14
Version     : 9.7.4
Release     : 0.2.b1.fc14
URL         : http://www.isc.org/products/BIND/
Summary     : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System)
server
Description :
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

--------------------------------------------------------------------------------
Update Information:

This update fixes CVE-2011-1910:

* large RRSIG RRsets and negative caching can crash named
--------------------------------------------------------------------------------
ChangeLog:

* Fri May 27 2011 Adam Tkac <atkac redhat com> 32:9.7.4-0.2.b1
- fix CVE-2011-1910
* Tue May 17 2011 Adam Tkac <atkac redhat com> 32:9.7.4-0.1.b1
- update to 9.7.4b1 (#683648)
  - bind97-rh674334.patch merged
  - bind97-rh665971.patch merged
  - bind97-cleanup.patch merged
* Fri Feb 18 2011 Adam Tkac <atkac redhat com> 32:9.7.3-1
- update to 9.7.3
  - bind97-krb5-self.patch merged
- fix dig +trace on dualstack systems (#674334)
- fix linkage order when building on system with older BIND (#665971)
- reduce number of gcc warnings
* Mon Dec 20 2010 Adam Tkac <atkac redhat com> 32:9.7.2-5.P3
- fix "krb5-self" update-policy rule processing
* Thu Dec  2 2010 Adam Tkac <atkac redhat com> 32:9.7.2-4.P3
- update to 9.7.2-P3
* Mon Nov  8 2010 Adam Tkac <atkac redhat com> 32:9.7.2-3.P2
- don't emit various informational messages by default (#645544)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #708301 - CVE-2011-1910 bind: Large RRSIG RRsets and Negative
Caching can crash named
        https://bugzilla.redhat.com/show_bug.cgi?id=708301
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update bind' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7621
2011-05-27 19:57:18
--------------------------------------------------------------------------------

Name        : bind
Product     : Fedora 13
Version     : 9.7.3
Release     : 2.P1.fc13
URL         : http://www.isc.org/products/BIND/
Summary     : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System)
server
Description :
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

--------------------------------------------------------------------------------
Update Information:

Update to 9.7.3-P1 which fixes CVE-2011-1910:

* large RRSIG RRsets and negative caching can crash named
--------------------------------------------------------------------------------
ChangeLog:

* Fri May 27 2011 Adam Tkac <atkac redhat com> 32:9.7.3-2.P1
- update to 9.7.3-P1 (CVE-2011-1910)
* Fri Feb 18 2011 Adam Tkac <atkac redhat com> 32:9.7.3-1
- update to 9.7.3
  - bind97-rh507429.patch merged
- fix dig +trace on dualstack systems (#674334)
- fix linkage order when building on system with older BIND (#665971)
- reduce number of gcc warnings
* Fri Feb 18 2011 Adam Tkac <atkac redhat com> 32:9.7.2-2.P3
- don't emit various informational messages by default (#645544)
* Thu Dec  2 2010 Adam Tkac <atkac redhat com> 32:9.7.2-1.P3
- update to 9.7.2-P3
* Mon Nov 29 2010 Jan GÄ