Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 264301 - <net-dns/bind-9.4.3_p2 DNSSEC lookaside validation failure for unrecognized signature algorithms
Summary: <net-dns/bind-9.4.3_p2 DNSSEC lookaside validation failure for unrecognized s...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Gentoo Security
URL: https://lists.isc.org/pipermail/bind-...
Whiteboard: B3 [noglsa]
Keywords:
: 265095 (view as bug list)
Depends on:
Blocks:
 
Reported: 2009-03-30 15:27 UTC by Marek Królikowski
Modified: 2009-04-15 20:23 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marek Królikowski 2009-03-30 15:27:50 UTC 
If possible please add bind-9.4.3-P2 to portage

Reproducible: Always
Comment 1 Tobias Scherbaum (RETIRED) gentoo-dev 2009-04-11 17:07:52 UTC 
9.4.3_p2 and 9.5.1_p2 are in cvs (plus corresponding bind-tools). Announcement for both versions states:

BIND 9.4.3-P2 is a SECURITY patch for BIND 9.4.3.  It addresses a bug
in DNSSEC lookaside validation (DLV): unrecognized signature algorithms,
which should have been treated as the equivalent of an unsigned zone,
were instead treated as a validation failure.

re-assigning to security@g.o therefore.
Comment 2 Tobias Scherbaum (RETIRED) gentoo-dev 2009-04-11 17:08:05 UTC 
*** Bug 265095 has been marked as a duplicate of this bug. ***
Comment 3 Robert Buchholz (RETIRED) gentoo-dev 2009-04-12 16:25:24 UTC 
Arches, please test and mark stable:
=net-dns/bind-9.4.3_p2
Target keywords : "alpha amd64 arm hppa ia64 ppc ppc64 s390 sh sparc x86"
Comment 4 Tobias Scherbaum (RETIRED) gentoo-dev 2009-04-12 17:14:41 UTC 
(In reply to comment #3)
> Arches, please test and mark stable:
> =net-dns/bind-9.4.3_p2
> Target keywords : "alpha amd64 arm hppa ia64 ppc ppc64 s390 sh sparc x86"
> 

plus =net-dns/bind-tools-9.4.3_p2 please.
Comment 5 Brent Baude (RETIRED) gentoo-dev 2009-04-13 14:30:29 UTC 
ppc and ppc64 done
Comment 6 Jeroen Roovers (RETIRED) gentoo-dev 2009-04-14 14:48:53 UTC 
Stable for HPPA.
Comment 7 Raúl Porcel (RETIRED) gentoo-dev 2009-04-15 14:08:35 UTC 
alpha/arm/ia64/s390/sh/sparc/x86 stable
Comment 8 Markus Meier gentoo-dev 2009-04-15 19:50:51 UTC 
amd64 stable, all arches done.
Comment 9 Alex Legler (RETIRED) archtester gentoo-dev Security 2009-04-15 20:13:10 UTC 
Ready for GLSA voting. I would say NO.
Comment 10 Tobias Heinlein (RETIRED) gentoo-dev 2009-04-15 20:23:43 UTC 
NO too, closing.