bind-9.9.4-61.1.0.1.el7.AXS7

エラータID: AXSA:2018-3317:03

Release date: 
Friday, September 7, 2018 - 10:07
Subject: 
bind-9.9.4-61.1.0.1.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service (CVE-2018-5740)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Asianux would like to thank ISC for reporting this issue. Upstream acknowledges Tony Finch (University of Cambridge) as the original reporter.

CVE-2018-5740
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

CVEs: 
CVE-2018-5740
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.
Additional Info: 

N/A

Download: 

SRPMS
  1. bind-9.9.4-61.1.0.1.el7.AXS7.src.rpm
    MD5: f96d106ba96b13c6f56e4e0f4c8f46d4
    SHA-256: db0771d6290ce119a62ee8891dbaf9ab66e7c2420f571863e951fd72c45d3d60
    Size: 7.60 MB

Asianux Server 7 for x86_64
  1. bind-9.9.4-61.1.0.1.el7.AXS7.x86_64.rpm
    MD5: 0e9562307563804eecdd530c73cb4aec
    SHA-256: 6c6bbc5ff28e949860601fa390dc89f99331bf8507d1eac33fbaf9ea3ec2d959
    Size: 1.78 MB
  2. bind-chroot-9.9.4-61.1.0.1.el7.AXS7.x86_64.rpm
    MD5: 6887ba4f0ffdb29b2082d41abfd72b07
    SHA-256: e164b38e4f13637e468c869e7e05422b4bff3211eb6e221520551d2ffe855379
    Size: 86.41 kB
  3. bind-libs-9.9.4-61.1.0.1.el7.AXS7.x86_64.rpm
    MD5: 82bac872ead77aca0324d975b225d1fb
    SHA-256: 462a7a188b17d30d9dc7c3a5604dfe9daeb66e015a82e7628b1740acc7d29def
    Size: 1.00 MB
  4. bind-libs-lite-9.9.4-61.1.0.1.el7.AXS7.x86_64.rpm
    MD5: a292b87f92775e5f9077581be53b0456
    SHA-256: 77d1ce42f5127467f3aa28a3a18d31ce327f957fe55a2f99425279664819042d
    Size: 733.13 kB
  5. bind-license-9.9.4-61.1.0.1.el7.AXS7.noarch.rpm
    MD5: 1d2954375b60cdaeb79b2f479aa23c5b
    SHA-256: d334a330149c04a48f5eb3d412af774c3c04146b4be1ed163c114d7523fd6dca
    Size: 84.57 kB
  6. bind-pkcs11-9.9.4-61.1.0.1.el7.AXS7.x86_64.rpm
    MD5: accd1fa212b44e599d938d135b79c9c5
    SHA-256: 0e886e9b93aad5146bd09d1315dbc3eba91043b90fe921e32b36186d2c16c27d
    Size: 296.69 kB
  7. bind-pkcs11-libs-9.9.4-61.1.0.1.el7.AXS7.x86_64.rpm
    MD5: c5bb4ad74d2d68e9b98e0b4ba77df176
    SHA-256: 7ccf6b196c89d4afab40afe8db3f12541b5920a581eb74930bc7872fcc7be755
    Size: 1.15 MB
  8. bind-pkcs11-utils-9.9.4-61.1.0.1.el7.AXS7.x86_64.rpm
    MD5: 60827a3b91881c79ae18480b66e55b5c
    SHA-256: 9549b9dfd59d1ffb973bd6cc66c4b8ea0947d4632dbd038cecd65432ed63a75c
    Size: 197.46 kB
  9. bind-utils-9.9.4-61.1.0.1.el7.AXS7.x86_64.rpm
    MD5: efbeffb2ad90aadc92e1254976a54a80
    SHA-256: 779b3ceb166cd046cbe44f5a877d9d7634e441f450a69b53963d6177743a6245
    Size: 203.61 kB
  10. bind-libs-9.9.4-61.1.0.1.el7.AXS7.i686.rpm
    MD5: df785c49b86b438fc3b8ca0fdf798536
    SHA-256: 61cf1ffbfe8b976bc2ea88e1dc6dd233093f6fe6d235c1d03c6c76a39dde8e08
    Size: 0.99 MB
  11. bind-libs-lite-9.9.4-61.1.0.1.el7.AXS7.i686.rpm
    MD5: a498274219ea2c789b66ae804df6b94b
    SHA-256: 58cdff7797dbdf46ea10461710b1a92b737b76ebbc69ebd0eec575bb8a55dce8
    Size: 723.33 kB
  12. bind-pkcs11-libs-9.9.4-61.1.0.1.el7.AXS7.i686.rpm
    MD5: 3226aa607e06dd08dcc440cb1d6916ab
    SHA-256: ee8654c26e515b51dd5a8cf746d43eac817a880d2f551e80ba94c2483ffbf385
    Size: 1.13 MB