| |||||||||||||||||||
Fedora alert FEDORA-2011-7602 (bind)
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2011-7602 2011-05-27 19:56:34 -------------------------------------------------------------------------------- Name : bind Product : Fedora 14 Version : 9.7.4 Release : 0.2.b1.fc14 URL : http://www.isc.org/products/BIND/ Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. -------------------------------------------------------------------------------- Update Information: This update fixes CVE-2011-1910: * large RRSIG RRsets and negative caching can crash named -------------------------------------------------------------------------------- ChangeLog: * Fri May 27 2011 Adam Tkac <atkac redhat com> 32:9.7.4-0.2.b1 - fix CVE-2011-1910 * Tue May 17 2011 Adam Tkac <atkac redhat com> 32:9.7.4-0.1.b1 - update to 9.7.4b1 (#683648) - bind97-rh674334.patch merged - bind97-rh665971.patch merged - bind97-cleanup.patch merged * Fri Feb 18 2011 Adam Tkac <atkac redhat com> 32:9.7.3-1 - update to 9.7.3 - bind97-krb5-self.patch merged - fix dig +trace on dualstack systems (#674334) - fix linkage order when building on system with older BIND (#665971) - reduce number of gcc warnings * Mon Dec 20 2010 Adam Tkac <atkac redhat com> 32:9.7.2-5.P3 - fix "krb5-self" update-policy rule processing * Thu Dec 2 2010 Adam Tkac <atkac redhat com> 32:9.7.2-4.P3 - update to 9.7.2-P3 * Mon Nov 8 2010 Adam Tkac <atkac redhat com> 32:9.7.2-3.P2 - don't emit various informational messages by default (#645544) -------------------------------------------------------------------------------- References: [ 1 ] Bug #708301 - CVE-2011-1910 bind: Large RRSIG RRsets and Negative Caching can crash named https://bugzilla.redhat.com/show_bug.cgi?id=708301 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update bind' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-... (Log in to post comments)
|
|||||||||||||||||||