[Cialug] BIND vulnerability Patches

[David Champion]

Mandriva has an update for bind (for the 1 or 2 of you tres chic kids 
out there that run Mandriva)...

http://www.mandriva.com/en/security/advisories?name=MDVSA-2009:181

-dc

Matt Stanton wrote:
> Ubuntu has a pretty large update (not in size so much as a Whole Lot[tm] 
> of packages) that include BIND, a lot of libs BIND uses, and a bunch of 
> programs that are linked to BIND.  Also a couple of packages for a 
> kernel update.  That's not to say that they address this issue, but when 
> I saw the list of updates I certainly thought to myself "Hmm, looks like 
> they found something wrong with BIND".  To my knowledge, they had pushed 
> a few updates a short while ago that must've included a kernel update or 
> alsa update, because it borked the sound on my HP mini and I had to go 
> through the alsa recompile again to fix it.  I did this two days ago, so 
> the BIND updates must've come out in the past couple of days.
>
> -Matt
>
> Josh More wrote:
>   
>> Early reading indicates a DOS.  I've not seen any distro patches yet. 
>> There ARE exploits in the wild.
>>
>> I'll be diving deeper into it tonight.
>>
>> -Josh
>>
>> Mobile email powered by Nokia Intellisync
>>
>> ---- Original Message ----
>> From: "Nathan C. Smith" <nathan.smith at ipmvs.com>
>> Date: 09/7/29 15:43
>> To: "Central Iowa Linux Users Group" <cialug at cialug.org>
>> Subj: [Cialug] BIND vulnerability Patches
>>
>> Is anyone hip to this, what the threat is and what the patch is and
>> whether and which distros have patches yet?
>>
>>
>> -Nate
>>