Re: [SECURITY] [DSA 2272-1] bind9 security update
Thanks guys
Riaan Labuschagne
riaan@zapop.com
C: +27834444148
T: +27219483188
www.zapop.com
Florian Weimer <fw@deneb.enyo.de> wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>- -------------------------------------------------------------------------
>Debian Security Advisory DSA-2272-1 security@debian.org
>http://www.debian.org/security/ Florian Weimer
>July 05, 2011 http://www.debian.org/security/faq
>- -------------------------------------------------------------------------
>
>Package : bind9
>Vulnerability : denial of service
>Problem type : remote
>Debian-specific: no
>CVE ID : CVE-2011-2464
>
>It was discovered that BIND, a DNS server, does not correctly process
>certain UPDATE requests, resulting in a server crash and a denial of
>service. This vulnerability affects BIND installations even if they
>do not actually use dynamic DNS updates.
>
>For the oldstable distribution (lenny), this problem has been fixed in
>version 1:9.6.ESV.R4+dfsg-0+lenny3.
>
>For the stable distribution (squeeze), this problem has been fixed in
>version 1:9.7.3.dfsg-1~squeeze3.
>
>The testing distribution (wheezy) and the unstable distribution (sid)
>will be fixed later.
>
>We recommend that you upgrade your bind9 packages.
>
>Further information about Debian Security Advisories, how to apply
>these updates to your system and frequently asked questions can be
>found at: http://www.debian.org/security/
>
>Mailing list: debian-security-announce@lists.debian.org
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.9 (GNU/Linux)
>
>iQEcBAEBAgAGBQJOE15NAAoJEL97/wQC1SS+XAEH/133aCRGwIHsAYR3OKT58a4d
>Id1OcLTsa1uhKXx8Y/7dNBgzf11HjiiL0ZerCOxNZqdpLIm4gugpQmL3XRjPhSK5
>zisxyMN+31veDl5r+mey+hvZ7Ltel+lrTLxZeMQvDUf+RHJralO6YAovo7ozxeoC
>u9WZZW3ueVm7zEaSCqbEhcr+RQoNpLBkgqckTaPnMHbh8p+Jp8gl1//98CPbUo8R
>OfP59LUYmm1K7cIEX1HYz19Ll/XZ4pWIlahdl4dbdwlrzGXmO1PXt6RwG4uoHA2/
>mOtylCJAct3i9DQ0gWYQpc+cFFRdOAKv04hgelwrNtPIXDil8hsOBtuGqklIpAM=
>=6PQL
>-----END PGP SIGNATURE-----
>
>
>--
>To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
>with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>Archive: http://lists.debian.org/8762ngwop4.fsf@mid.deneb.enyo.de
>
Reply to: