Stay Secure with the Latest Linux Advisories

security advisorydenial of servicebind

Slackware 13.1: 2010-350-02 Important: OpenSSH Denial Of Service

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues that could allow attackers to successfully query private DNS records, or cause a denial of service. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] bind (SSA:2010-350-01) New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues that could allow attackers to successfully query private DNS records, or cause a denial of service. Here are the details from the Slackware 13.1 ChangeLog: +--------------------------+ patches/packages/bind-9.4_ESV_R4-i486-1_slack13.1.txz: Upgraded. This update fixes some security issues. For more information, see: https://www.cve.org/CVERecord?id=CVE-2010-3613 https://www.cve.org/CVERecord?id=CVE-2010-3614 https://www.cve.org/CVERecord?id=CVE-2010-3615 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 8.1: Updated package for Slackware 9.0: Updated package for Slackware 9.1: Updated package for Slackware 10.0: Updated package for Slackware 10.1: Updated package for Slackware 10.2: Updated package for Slackware 11.0: Updated package for Slackware 12.0: Updated package for Slackware 12.1: Updated package for Slackware 12.2: Updated package for Slackware 13.0: Updated package for Slackware x86_64 13.0: Updated package forSlackware 13.1: Updated package for Slackware x86_64 13.1: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 8.1 package: c6558b863b2c06bd860788d2e063d6b1 bind-9.4_ESV_R4-i386-1_slack8.1.tgz Slackware 9.0 package: b8017dc56859c7ea12878fd55a139914 bind-9.4_ESV_R4-i386-1_slack9.0.tgz Slackware 9.1 package: 1c2a32a60d4f2930040d9eb2ff01298c bind-9.4_ESV_R4-i486-1_slack9.1.tgz Slackware 10.0 package: 07227e76140a50a530b264ceb2209f80 bind-9.4_ESV_R4-i486-1_slack10.0.tgz Slackware 10.1 package: 842d8a7d2fcba797ba4a0c4b304ebec0 bind-9.4_ESV_R4-i486-1_slack10.1.tgz Slackware 10.2 package: 07373bf15e27335132bc8c17690134df bind-9.4_ESV_R4-i486-1_slack10.2.tgz Slackware 11.0 package: aca01fb99555ccffaa08294f4be13772 bind-9.4_ESV_R4-i486-1_slack11.0.tgz Slackware 12.0 package: 621703e39b34d091e65084a9c80ac015 bind-9.4_ESV_R4-i486-1_slack12.0.tgz Slackware 12.1 package: 57664e1beb3b046949fadf4fa48dec8d bind-9.4_ESV_R4-i486-1_slack12.1.tgz Slackware 12.2 package: 74e1feb7ae425e4f8072cf125f25172f bind-9.4_ESV_R4-i486-1_slack12.2.tgz Slackware 13.0 package: eaa9031813f824f93d532a0134b8d6f1 bind-9.4_ESV_R4-i486-1_slack13.0.txz Slackware x86_64 13.0 package: 7dce1ab33c6cff13b7be0e95cd72da7a bind-9.4_ESV_R4-x86_64-1_slack13.0.txz Slackware 13.1 package: c200ff5446cbdbf0ccabdd3b0b085ae4 bind-9.4_ESV_R4-i486-1_slack13.1.txz Slackware x86_64 13.1 package: 3c49a4f64373cf3c47a4c3ef4e2ac159 bind-9.4_ESV_R4-x86_64-1_slack13.1.txz Slackware -current package: c62f701d512980604924dd8b1c022283 bind-9.7.2_P3-i486-1.txz Slackware x86_64 -current package: bc32cc42a4dffd1eed0c0a60a52eb147 bind-9.7.2_P3-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg bind-9.4_ESV_R4-i486-1_slack13.1.txz Then, restart the name server: # /etc/rc.d/rc.bind restart +-----+ . Recent updates to bind packages for Slackware address vulnerabilities that could permit the retrieval ofconfidential DNS records, thereby mitigating potential denial of service threats.. Bind Security Update, Slackware Packages, DNS Security. . Severity: Important. LinuxSecurity.com Team

Dec 16, 2010 •Important Slackware