openSUSE 12.3: 2013:1353-1 Important: Bind Remote Execution Risk
opensuse
August 19, 2013
An update that fixes one vulnerability is now available.
Description
The BIND nameserver was updated to 9.9.3P2 to fix a
security issue where incorrect bounds checking on private
type 'keydata' could lead to a remotely triggerable REQUIRE
failure. (CVE-2013-4854, bnc#831899)
Patch
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE 12.3:
zypper in -t patch openSUSE-2013-654
- openSUSE 12.2:
zypper in -t patch openSUSE-2013-654
To bring your system up-to-date, use "zypper patch".
Package List
- openSUSE 12.3 (i586 x86_64):
bind-9.9.3P2-2.7.1
bind-chrootenv-9.9.3P2-2.7.1
bind-debuginfo-9.9.3P2-2.7.1
bind-debugsource-9.9.3P2-2.7.1
bind-devel-9.9.3P2-2.7.1
bind-libs-9.9.3P2-2.7.1
bind-libs-debuginfo-9.9.3P2-2.7.1
bind-lwresd-9.9.3P2-2.7.1
bind-lwresd-debuginfo-9.9.3P2-2.7.1
bind-utils-9.9.3P2-2.7.1
bind-utils-debuginfo-9.9.3P2-2.7.1
- openSUSE 12.3 (x86_64):
bind-libs-32bit-9.9.3P2-2.7.1
bind-libs-debuginfo-32bit-9.9.3P2-2.7.1
- openSUSE 12.3 (noarch):
bind-doc-9.9.3P2-2.7.1
- openSUSE 12.2 (i586 x86_64):
bind-9.9.2P2-1.19.1
bind-chrootenv-9.9.2P2-1.19.1
bind-debuginfo-9.9.2P2-1.19.1
bind-debugsource-9.9.2P2-1.19.1
bind-devel-9.9.2P2-1.19.1
bind-libs-9.9.2P2-1.19.1
bind-libs-debuginfo-9.9.2P2-1.19.1
bind-lwresd-9.9.2P2-1.19.1
bind-lwresd-debuginfo-9.9.2P2-1.19.1
bind-utils-9.9.2P2-1.19.1
bind-utils-debuginfo-9.9.2P2-1.19.1
- openSUSE 12.2 (x86_64):
bind-libs-32bit-9.9.2P2-1.19.1
bind-libs-debuginfo-32bit-9.9.2P2-1.19.1
- openSUSE 12.2 (noarch):
bind-doc-9.9.2P2-1.19.1
References
https://www.suse.com/security/cve/CVE-2013-4854.html
--
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2013:1353-1
Rating: important
Affected Products:
openSUSE 12.3
openSUSE 12.2
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!