FEDORA-2017-d04f7ddd73 — security update for bind, bind-dyndb-ldap, & 1 more

stable

bind-9.10.5-2.P2.fc25, bind-dyndb-ldap-10.1-2.fc25, & 1 more

FEDORA-2017-d04f7ddd73 created by pemensik 5 years ago for Fedora 25

Update back to ISC supported version. Security fix for CVE-2017-3143, CVE-2017-3142, CVE-2017-3140

Update to 10.1.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2017-d04f7ddd73

This update has been submitted for testing by pemensik.

5 years ago

This update has obsoleted bind-dyndb-ldap-10.1-1.fc25, and has inherited its bugs and notes.

5 years ago

This update has been pushed to testing.

5 years ago

yuwata commented & provided feedback 5 years ago

karma

works for me

hreindl commented & provided feedback 5 years ago

karma

works for me

cserpentis commented & provided feedback 5 years ago

karma

works for me in a VM

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

bind-9.10.5-2.P2.fc25

bind-dyndb-ldap-10.1-2.fc25

dnsperf-2.1.0.0-3.fc25

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1461302 CVE-2017-3140 bind: Error processing RPZ rules leads to endless loop while handling query

BZ#1461641 CVE-2017-3140 bind: Error processing RPZ rules leads to endless loop while handling query [fedora-all]

BZ#1466189 CVE-2017-3142 bind: An error in TSIG authentication can permit unauthorized zone transfers

BZ#1466193 CVE-2017-3143 bind: An error in TSIG authentication can permit unauthorized dynamic updates

BZ#1466609 CVE-2017-3143 bind: An error in TSIG authentication can permit unauthorized dynamic updates [fedora-all]

BZ#1466611 CVE-2017-3142 bind: An error in TSIG authentication can permit unauthorized zone transfers [fedora-all]

bind-9.10.5-2.P2.fc25

bind-dyndb-ldap-10.1-2.fc25

dnsperf-2.1.0.0-3.fc25

Automated Test Results

None