Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#7114 - Warning on bind
Attached to Project:
Arch Linux
Opened by DaNiMoTh (DaNiMoTh) - Thursday, 10 May 2007, 13:50 GMT
Last edited by Tobias Powalowski (tpowa) - Saturday, 12 May 2007, 05:42 GMT
Opened by DaNiMoTh (DaNiMoTh) - Thursday, 10 May 2007, 13:50 GMT
Last edited by Tobias Powalowski (tpowa) - Saturday, 12 May 2007, 05:42 GMT
|
Details------------------------------------------------------------
Arch Linux Security Warning ALSW 2007-#30 ------------------------------------------------------------ Name: bind Date: 2007-05-10 Severity: Medium Warning #: 2007-#30 ------------------------------------------------------------ Product Background =================== BIND (Berkeley Internet Name Domain) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System, Problem Background - Impact =================== A vulnerability in ISC BIND 9.4.0, when recursion is enabled, could allow a remote attacker to cause a denial of service (daemon exit) via a certain sequence of queries. Problem Packages =================== Package: bind Repo: current Group: daemons Unsafe: < 9.4.1 Safe: >= 9.4.1 Package Fix =================== Upgrade to 9.4.1 =================== Unofficial ArchLinux Security Bug Tracker: http://jjdanimoth.netsons.org/alsw.html Reference(s) =================== http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2241 |
This task depends upon
Comment by Dan McGee (toofishes) -
Friday, 11 May 2007, 22:59 GMT
Any other devs want to take a stab at this? Someone that actually uses BIND?