Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Slackware 14.1: 2014-344-01 Critical Bind Memory Exhaustion

slackware
Calendar Grey December 11, 2014
Dist Slackware Esm H88
Update the bind packages on Slackware to address memory exhaustion issues that impact several releases.
New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues

Summary

Here are the details from the Slackware 14.1 ChangeLog: patches/packages/bind-9.9.6_P1-i486-1_slack14.1.txz: Upgraded. This update fixes a security issue where a failure to place limits on delegation chaining can allow an attacker to crash BIND or cause memory exhaustion. For more information, see: https://kb.isc.org/docs/aa-01216 https://www.cve.org/CVERecord?id=CVE-2014-8500 (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware 13.37:
Updated package for Slackware x86_64 13.37:
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 13.0 package: dac91fcb3e498b40c92bcc5752802df4 bind-9.9.6_P1-i486-1_slack13.0.txz
Slackware x86_64 13.0 package: 8491ebdc3d3d83b592fed60f2d43a16f bind-9.9.6_P1-x86_64-1_slack13.0.txz
Slackware 13.1 package: 005f535fda7f97f12541d1e03470bea9 bind-9.9.6_P1-i486-1_slack13.1.txz
Slackware x86_64 13.1 package: 7798df687be7bf46430d6289da4dccba bind-9.9.6_P1-x86_64-1_slack13.1.txz
Slackware 13.37 package: 03b9fd71668582bd87dc06271a046281 bind-9.9.6_P1-i486-1_slack13.37.txz
Slackware x86_64 13.37 package: acb0553b199504ba76738eb7f9aeb2d2 bind-9.9.6_P1-x86_64-1_slack13.37.txz
Slackware 14.0 package: 54994a041c7dbeadacce8c35134e926c bind-9.9.6_P1-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: 2e966897f0988b3b0376cb0faa9ce47c bind-9.9.6_P1-x86_64-1_slack14.0.txz
Slackware 14.1 package: 0eec33d454b0e7d949f23ec291ab6e39 bind-9.9.6_P1-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 909b4df8cce45cb3ac37352ee5580b5c bind-9.9.6_P1-x86_64-1_slack14.1.txz
Slackware -current package: d62c9a50457e3536cbaa03070677bb32 n/bind-9.10.1_P1-i486-1.txz
Slackware x86_64 -current package: 3ffe3791f43f3fc319a2119421e808ce n/bind-9.10.1_P1-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg bind-9.9.6_P1-i486-1_slack14.1.txz Then, restart the name server: # /etc/rc.d/rc.bind restart

Related News

Your message here