Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

Slackware 14.1: Important Bind Security Update: DoS Issues Resolved

slackware
Calendar Grey March 10, 2016
Dist Slackware Esm H88
Recent bind updates for Slackware address urgent security vulnerabilities. The patches provide targeted solutions for multiple versions.
New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues

Summary

Here are the details from the Slackware 14.1 ChangeLog: patches/packages/bind-9.9.8_P4-i486-1_slack14.1.txz: Upgraded. Fixed security issues: Fix resolver assertion failure due to improper DNAME handling when parsing fetch reply messages. (CVE-2016-1286) [RT #41753] Malformed control messages can trigger assertions in named and rndc. (CVE-2016-1285) [RT #41666] For more information, see: https://www.cve.org/CVERecord?id=CVE-2016-1286 https://www.cve.org/CVERecord?id=CVE-2016-1285 (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware 13.37:
Updated package for Slackware x86_64 13.37:
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 13.0 package: c1b6ba4c5a7112e7dc6c31431dfd640a bind-9.9.8_P4-i486-1_slack13.0.txz
Slackware x86_64 13.0 package: 92d88779a6c17e5f748393b4cf55fed1 bind-9.9.8_P4-x86_64-1_slack13.0.txz
Slackware 13.1 package: 35dac0c78a3d59d2473ee1f92889a7e7 bind-9.9.8_P4-i486-1_slack13.1.txz
Slackware x86_64 13.1 package: c33dc56aab32d17492a7f23acf0aa151 bind-9.9.8_P4-x86_64-1_slack13.1.txz
Slackware 13.37 package: b964113a451b6a0389e80551357beddc bind-9.9.8_P4-i486-1_slack13.37.txz
Slackware x86_64 13.37 package: dc36aa99be335a65c44b9634c9487f89 bind-9.9.8_P4-x86_64-1_slack13.37.txz
Slackware 14.0 package: 2a4615b5ed0bed874b755809f3ec8ea0 bind-9.9.8_P4-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: 4cd95ff874950f6eddc717762932d403 bind-9.9.8_P4-x86_64-1_slack14.0.txz
Slackware 14.1 package: 6230922ded3a9d008a5bd5570741864b bind-9.9.8_P4-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 95b39f4769499ccb4516db99631061c7 bind-9.9.8_P4-x86_64-1_slack14.1.txz
Slackware -current package: d3073d949c2a9d33966e0734c6bd1556 n/bind-9.10.3_P4-i586-1.txz
Slackware x86_64 -current package: 34387514c9c357168dfa39bca88fe9b1 n/bind-9.10.3_P4-x86_64-1.txz

Severity
important
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg bind-9.9.8_P4-i486-1_slack14.1.txz Then, restart the name server: # /etc/rc.d/rc.bind restart

Related News

Your message here