"Jumbo" Security Release of BIND corrects four exploitable vulnerabilities.

project722 project722 at gmail.com
Thu Jan 12 15:51:38 UTC 2017


Is there a way to mitigate these vulnerabilities outside of updating BIND?
We use RHEL and have to wait on the official patch they provide. Our Bind
version is 9.8.2 for RHEL 6 and 9.9.4 for RHEL 7.

On Thu, Jan 12, 2017 at 9:37 AM, G.W. Haywood <bind at jubileegroup.co.uk>
wrote:

> Hello again,
>
> On Thu, 12 Jan 2017, Andrey Fanin wrote:
>
>> On Thu, 12 Jan 2017, G.W. Haywood wrote:
>> > On Thu, 12 Jan 2017, Michael McNally wrote:
>> >
>> > > ISC has issued new security releases of BIND today [..snip..]
>> >
>> > I'm trying to get BIND 9.9.9-P5 from the downloads page, but
>> > it seems to be giving me something else...
>>
>> Looks all is correctly delivered ( all three versions of tar.gz )
>> from my side ( UA )
>>
>
> Maybe it makes a difference that I'm in England, and using IPv6?
>
> laptop3:~$ >>> wget https://www.isc.org/downloads/
> file/bind-9-9-10b1/?version=tar-gz -O bind.tgz
> --2017-01-12 15:16:37--  https://www.isc.org/downloads/
> file/bind-9-9-10b1/?version=tar-gz
> Resolving www.isc.org (www.isc.org)... 2001:4f8:0:2::69, 149.20.64.69
> Connecting to www.isc.org (www.isc.org)|2001:4f8:0:2::69|:443...
> connected.
> HTTP request sent, awaiting response... 200 OK
> Length: unspecified [application/x-gzip]
> Saving to: ‘bind.tgz’
>
> bind.tgz  [.........=>.......]   8.98M  89.5KB/s   in 71s
>
> 2017-01-12 15:17:50 (129 KB/s) - ‘bind.tgz’ saved [9414022]
>
> laptop3:~$ >>> tar tzvf bind.tgz | head
> drwxr-xr-x each/wheel        0 2016-12-29 22:25 bind-9.10.5b1/
> -rw-r--r-- each/wheel       52 2016-12-29 22:22
> bind-9.10.5b1/.gitattributes
> -rw-r--r-- each/wheel       14 2016-12-29 22:25 bind-9.10.5b1/srcid
> -rw-r--r-- each/wheel       88 2016-12-29 22:22 bind-9.10.5b1/Atffile
> -rw-r--r-- each/wheel   479504 2016-12-29 22:22 bind-9.10.5b1/CHANGES
> -rw-r--r-- each/wheel    27137 2016-12-29 22:22 bind-9.10.5b1/COPYRIGHT
> -rw-r--r-- each/wheel    33543 2016-12-29 22:22 bind-9.10.5b1/FAQ
> -rw-r--r-- each/wheel    45917 2016-12-29 22:22 bind-9.10.5b1/FAQ.xml
> -rw-r--r-- each/wheel    12791 2016-12-29 22:22 bind-9.10.5b1/HISTORY
> -rw-r--r-- each/wheel     3609 2016-12-29 22:22 bind-9.10.5b1/Makefile.in
>
> --
>
> 73,
> Ged.
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170112/eab6bfe4/attachment.html>


More information about the bind-users mailing list