Re: bind9: CVE-2017-3139 affects debian too
On Sat, Feb 03, 2018 at 02:37:14PM +0100, Vladislav Kurz wrote:
> Hello LTS team,
>
> please have a look at
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889285
>
> I think it is the same bug as CVE-2017-3139 which was considered to affect
> only RedHat, but it seems to affect debian wheezy too.
>
> Please check if it is possible to apply the same fixes as RedHat did.
> Or at leas update the bind package in wheezy-backports to match the version
> and security fixes from debian jesssie.
>
I am taking a look at this now.
Regards,
-Roberto
--
Roberto C. Sánchez
Reply to: