Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2016.0640
bind9 security update
10 March 2016
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: bind9
Publisher: Debian
Operating System: Debian GNU/Linux 7
Debian GNU/Linux 8
UNIX variants (UNIX, Linux, OSX)
Windows
Impact/Access: Denial of Service -- Remote/Unauthenticated
Resolution: Patch/Upgrade
CVE Names: CVE-2016-1286 CVE-2016-1285
Original Bulletin:
http://www.debian.org/security/2016/dsa-3511
Comment: This advisory references vulnerabilities in products which run on
platforms other than Debian. It is recommended that administrators
running bind9 check for an updated version of the software for their
operating system.
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- - -------------------------------------------------------------------------
Debian Security Advisory DSA-3511-1 security@debian.org
https://www.debian.org/security/ Michael Gilbert
March 09, 2016 https://www.debian.org/security/faq
- - -------------------------------------------------------------------------
Package : bind9
CVE ID : CVE-2016-1285 CVE-2016-1286
Two vulnerabilites have been discovered in ISC's BIND DNS server.
CVE-2016-1285
A maliciously crafted rdnc, a way to remotely administer a BIND server,
operation can cause named to crash, resulting in denial of service.
CVE-2016-1286
An error parsing DNAME resource records can cause named to crash,
resulting in denial of service.
For the oldstable distribution (wheezy), these problems have been fixed
in version 9.8.4.dfsg.P1-6+nmu2+deb7u10.
For the stable distribution (jessie), these problems have been fixed in
version 9.9.5.dfsg-9+deb8u6.
For the testing (stretch) and unstable (sid) distributions, these
problems will be fixed soon.
We recommend that you upgrade your bind9 packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQQcBAEBCgAGBQJW4IfBAAoJELjWss0C1vRzazMf/1ZculXzFJ55Y552ygS3+uBc
n1ZSKa1BTQB7LuZ/wfHY3yDNXkXWQ9Ey5Rnj9QN6zJfOPnXCQ6RlvgNISMb/meHA
oOiw9IXtx0uKv5b7VGKGrEiin/l9TDUGVv7Z/d6P4gTjbQo70BdC1+UgLNJWP2jI
utUippaTlMto6WeXr8xS0orM7852PDWsSiWjLK216IgsWgUMlfRE1vS/UwSBwN6j
xZHl5xhhb2Qs0vORGq//h5Y5umBA92rW6wG1vmOOGGIScYjKIJVH+fYKaJOQl6Y7
aRVpnvdZmSgbU/uglSjhlvx9BICjfsV+cAAvNY0OY3G7bmYMAEtQQThCRheQRSui
K2z02qVZ4YAXiyfNjCkrO2J3B1xo7C5kVzGt/hcn7vjeMsfJlTBd/ppcAwWhLYrw
BspXLhn122QDjqAS+wL64MtSz9gWKgQi49bEsVNRYmqpt20RBs0stMqU/DHxJhCu
L3eCQuuBTzOyD8aTJ2c1KvGi9J8l7+D9TNcvg2BBudDpoyNvpxGz1ppNnzGQENN5
kNR701pSude+8OSFrGnK9JUmt1ap4WNKWaUcIMZG2f9fBm8tdMWgp8iqou+Hiv0A
WlX1anODSWiCX5+T1u84AsoNZrYxyOPr6h3cOAEyqy6dJVslJw5xvmsq6x0GYVy+
84oJVY4sV8WLL4jyqIeWLaAp/GcKKyhD0liEgDrO5GZ/BAVCLCu4466XVNx8mPsc
QFLx7vjHv8eF9slrAw6beJ4Qulw/bEefn6OL2PC1Ic1EJSJ2VaHhC4dwhLSduLau
DXjbeYBKpk8n5jukTrIrusKqTlgDqtoNC8TRx9giBXUfP9PYexAleO4fMT35UYN3
FKcpwwjLD5wcOjc3aVEhZdaV9rbTcIwuPxXg3qsZLXH5RXn9FwgbyaXvmoxoCsf0
6gyOVF5ZlOuxM2ZoBdVwExZVys8yM0ledJAaChV93CWENRxJKOzO06CcqKRfmJxa
aDwza5tcIx6yAFx6990LGFdAns7hPLi245pElO5AU16DNcHSbiSsEIdjt3h3S+/F
vJHb9VvghVmO71XaLCxV2fXdsYMNnOKGheEXlC4F4yBPn10di8U57uyB8NKJ8Tgv
W9r+6oeh9kVP/4KN8kvLmQWShgFrBPhbsuw3UPz9UnEYiFjlMRuTdP/TaYeroPJs
k+Q/+72K69UQizKJ9UtkPoqI2Tn3I7zptDMGRsr5Pmil2+nx8xkRK3VK5BSDqkkK
MEeY7zStrxqy/u+J4Uqf9XkgXnLMTkjv9UxFBp8D5e4Ao0Xk/LMo76ZJZuahqYtO
fQw1Xbb11+cSBtER67gG48v/2kjHZINqKyIG17/SofTfOusSiLgOCRKgLkrod+8=
=wSXP
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=DDQt
-----END PGP SIGNATURE-----