bind-9.8.2-0.68.1.0.1.rc1.AXS4

エラータID: AXSA:2018-3319:03

Release date: 
Monday, September 10, 2018 - 10:37
Subject: 
bind-9.8.2-0.68.1.0.1.rc1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service (CVE-2018-5740)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Asianux would like to thank ISC for reporting this issue. Upstream acknowledges Tony Finch (University of Cambridge) as the original reporter.

CVE-2018-5740
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

CVEs: 
CVE-2018-5740
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.
Additional Info: 

N/A

Download: 

SRPMS
  1. bind-9.8.2-0.68.1.0.1.rc1.AXS4.src.rpm
    MD5: 88e647f015c608f2b0426b1941606ae9
    SHA-256: 1a68938f0d3247efb8dabf79e6c56b326718d9e34c22454f7b2c220be97fd14a
    Size: 8.47 MB

Asianux Server 4 for x86
  1. bind-9.8.2-0.68.1.0.1.rc1.AXS4.i686.rpm
    MD5: 8d4113d8ac39660d85285f42c7cf17ad
    SHA-256: 1f941c34b79ed7d7839c98fba4f2deb16d93082206eba32f429051f05459a2d8
    Size: 4.00 MB
  2. bind-chroot-9.8.2-0.68.1.0.1.rc1.AXS4.i686.rpm
    MD5: 8d563384e063fd4986346527c4d226c7
    SHA-256: 0b88e3555414c70d458ff02f71e6d2d9610de6305457de4d6646aa61f9f9bf90
    Size: 77.40 kB
  3. bind-libs-9.8.2-0.68.1.0.1.rc1.AXS4.i686.rpm
    MD5: 3eed7096f599295e9344d2f18dc75305
    SHA-256: c8c8965a6dc8e047cf8a842f67cea2183aeb0f6f1e703477b951df5d64d24e30
    Size: 901.99 kB
  4. bind-utils-9.8.2-0.68.1.0.1.rc1.AXS4.i686.rpm
    MD5: 02c133652f7cef25dcbfb00844bd0f7a
    SHA-256: 91a8450c39b97fd61c631a7df208f02c0e001ecb25b667f3b0ae8fe5ff90f63e
    Size: 187.74 kB

Asianux Server 4 for x86_64
  1. bind-9.8.2-0.68.1.0.1.rc1.AXS4.x86_64.rpm
    MD5: b445c5febc36ce77d45f4d3a588035c5
    SHA-256: fbb2ba828bb277d0f9ba6292cd6485dfad1a24b386af5c66b322212fc2e33398
    Size: 4.00 MB
  2. bind-chroot-9.8.2-0.68.1.0.1.rc1.AXS4.x86_64.rpm
    MD5: eb3f3f32db72205f299842ec421d4227
    SHA-256: 505463d26306ebcddb17a6cf1bbffad97e7d9e27c2673f0c2d71a12b568b5e2d
    Size: 76.96 kB
  3. bind-libs-9.8.2-0.68.1.0.1.rc1.AXS4.x86_64.rpm
    MD5: efea36ba4cafcbc5ffadc6ae64ff2165
    SHA-256: dd9f7202324c3ce5e988c0aa8f4fbe7e9d68972a5e58a5c14a171940ba1fca0a
    Size: 891.41 kB
  4. bind-utils-9.8.2-0.68.1.0.1.rc1.AXS4.x86_64.rpm
    MD5: 60c1c83f703ec0290a198e7e4279aabb
    SHA-256: 201d92a21e1f8d45098825e061a9d46b63c39a7fd243165f610d751b3d396b2a
    Size: 188.34 kB
  5. bind-libs-9.8.2-0.68.1.0.1.rc1.AXS4.i686.rpm
    MD5: 3eed7096f599295e9344d2f18dc75305
    SHA-256: c8c8965a6dc8e047cf8a842f67cea2183aeb0f6f1e703477b951df5d64d24e30
    Size: 901.99 kB