U radu programskog paketa BIND uočena su dva sigurnosna propusta koja udaljenom napadaču omogućuju izvođenje napada uskraćivanjem usluge (rušenjem pozadinskog procesa).

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-9146
2011-07-08 17:19:16
--------------------------------------------------------------------------------

Name        : bind
Product     : Fedora 15
Version     : 9.8.0
Release     : 7.P4.fc15
URL         : http://www.isc.org/products/BIND/
Summary     : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System)
server
Description :
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

--------------------------------------------------------------------------------
Update Information:

Update to the 9.8.0-P4 security release.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul  5 2011 Adam Tkac <atkac redhat com> 32:9.8.0-7.P4
- update to 9.8.0-P4
  - bind98-libdns-export.patch merged
* Thu Jun  2 2011 Adam Tkac <atkac redhat com> 32:9.8.0-6.P2
- update the dyndb patch
* Fri May 27 2011 Adam Tkac <atkac redhat com> 32:9.8.0-5.P2
- fix compilation of libdns-export.so
* Fri May 27 2011 Adam Tkac <atkac redhat com> 32:9.8.0-4.P2
- update to 9.8.0-P2 (CVE-2011-1910)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #718966 - CVE-2011-2464 bind: Specially constructed packet will
cause named to exit
        https://bugzilla.redhat.com/show_bug.cgi?id=718966
  [ 2 ] Bug #718971 - CVE-2011-2465 bind: Remote Crash with Certain RPZ
Configurations
        https://bugzilla.redhat.com/show_bug.cgi?id=718971
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update bind' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce