Arch Linux

Bapman

Member

From: Ottawa, Canada

Registered: 2007-09-02

Posts: 140

Security issue in DNS ! Update bind.

Apparently there is a massive security issue in DNS protocol : http://securosis.com/2008/07/08/dan-kam … -released/

or http://www.kb.cert.org/vuls/id/800113

I am surprised I haven't seen any post on the forum about it. For now a solution could be to update bind to 9.5.0-P1 (I don't know if the one in testing is this particular one, there is no "P1").

Every DNS server has to be upgraded since the issue is in the protocol, not in the code !

el_zoona

Member

From: Argentina

Registered: 2008-02-01

Posts: 58

Website

Re: Security issue in DNS ! Update bind.

Yeah, i've read about it recently and came here to check if someone else was talkin about that.

The funny thing is: My ISP (Speedy - Telefonica de Argentina S.A.) is updating the DNS servers...and all of them went down because they had troubles :-P. Meaning, all people in Argentina with Speedy (Don't Know the numbers, but it's the largest one or the second) who don't know how to change the DNS is with no Internet or half...

---

// Send more Chuck Berry

dolby

Member

From: 1992

Registered: 2006-08-08

Posts: 1,581

Re: Security issue in DNS ! Update bind.

make a bug report

---

There shouldn't be any reason to learn more editor types than emacs or vi -- mg (1)
[You learn that sarcasm does not often work well in international forums.  That is why we avoid it. -- ewaller (arch linux forum moderator)

KimTjik

Member

From: Sweden

Registered: 2007-08-22

Posts: 715

Re: Security issue in DNS ! Update bind.

A lot of systems got updated yesterday/today. I just checked a Windows Server 2003 x64 RC2 at work; yesterday it was vulnerable, but today it's reported safe after the recent security updates (this site offers some kind of check: http://www.doxpara.com/)

I believe all the "big" ones in Linux did release an update yesterday, so there's probably plentiful of patches around... which is beyond the limits of my brain cells at the moment.

Bapman

Member

From: Ottawa, Canada

Registered: 2007-09-02

Posts: 140

Re: Security issue in DNS ! Update bind.

make a bug report

http://bugs.archlinux.org/task/10880