BIND 9.5.0-P2-W2 is now available.

Mark Andrews Mark_Andrews at isc.org
Fri Sep 19 05:26:36 UTC 2008


		BIND 9.5.0-P2-W2 is now available.

This is a WINDOWS-SPECIFIC update to address a denial-of-service
vulnerability in the Windows code of BIND 9.5.0-P2-W1.

This bug DOES NOT exist in the UNIX builds.

        BIND 9.5.0-P2-W2 contains security fixes:

2436.   [security]      win32: UDP client handler can be shutdown. [RT #18576]

BIND 9.5.0-P2-W2 can be downloaded from

        ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/bind-9.5.0-P2-W2.tar.gz

The PGP signature of the distribution is at

        ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/bind-9.5.0-P2-W2.tar.gz.asc
        ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/bind-9.5.0-P2-W2.tar.gz.sha256.asc
        ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/bind-9.5.0-P2-W2.tar.gz.sha512.asc

The signature was generated with the ISC public key, which is
available at <http://www.isc.org/about/openpgp/pgpkey2006.txt>.

A binary kit for Windows XP and Windows 2003 is at

	ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/BIND9.5.0-P2-W2.zip
	ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/BIND9.5.0-P2-W2.debug.zip

The PGP signature of the binary kit for Windows XP and Windows 2003 is at
        
	ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/BIND9.5.0-P2-W2.zip.asc
	ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/BIND9.5.0-P2-W2.zip.sha256.asc
	ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/BIND9.5.0-P2-W2.zip.sha512.asc
	ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/BIND9.5.0-P2-W2.debug.zip.asc
	ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/BIND9.5.0-P2-W2.debug.zip.sha256.asc
	ftp://ftp.isc.org/isc/bind9/9.5.0-P2-W2/BIND9.5.0-P2-W2.debug.zip.sha512.asc

A list of changes made since 9.5.0-P2-W1 follows.  For earlier changes,
see the file CHANGES in the distribution.

--------

        --- 9.5.0-P2-W2 released ---

2442.   [bug]           A lock could be destroyed twice. [RT# 18626]

2436.   [security]      win32: UDP client handler can be shutdown. [RT #18576]

        --- 9.5.0-P2-W1 released ---



More information about the bind-announce mailing list