| Summary: | <net-dns/bind{-bind-tools}-{9.10.5,9.11.0_p5}: multiple vulnerabilities | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED FIXED | ||
| Severity: | minor | CC: | arthur, blueness, hlein, hydrapolic, idl0r |
| Priority: | Normal | Flags: | stable-bot:
sanity-check-
|
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://www.openwall.com/lists/oss-security/2017/04/13/1 | ||
| Whiteboard: | B3 [glsa blocked cve] | ||
| Package list: |
=net-dns/bind-9.10.5
=net-dns/bind-9.11.0_p5
=net-dns/bind-tools-9.10.5
=net-dns/bind-tools-9.11.0_p5
|
Runtime testing required: | --- |
| Bug Depends on: | 597204, 600212, 621730 | ||
| Bug Blocks: | 605454, 608740 | ||
9.10.5 and 9.11.0_p5 have just been added. Would be cool if you could stabilize both versions and including bind-tools. =net-dns/bind-9.10.5 =net-dns/bind-tools-9.10.5 =net-dns/bind-9.11.0_p5 =net-dns/bind-tools-9.11.0_p5 PPC Arch, since you are in the middle of removing keywords I added the stabilization request but please remove yourself as not sure where you are in the process. amd64 stable x86 stable ppc64 stable arm stable ppc stable. sparc stable Stable on alpha. GLSA Vote: Yes! New GLSA request filed. Moving hppa to this one. @ HPPA AT: You probably have already noticed but all blocking bugs are now resolved so please proceed with stabilization so that we can send out the pending GLSA. Thanks! ia64 stable An automated check of this bug failed - the following atoms are unknown: net-dns/bind-tools-9.10.5 net-dns/bind-9.10.5 Please verify the atom list. An automated check of this bug failed - the following atoms are unknown: net-dns/bind-9.10.5 net-dns/bind-tools-9.10.5 Please verify the atom list. Ping on the Bug, holding up GLSA release. Superseded by bug 621730. Moving stabilization. This issue was resolved and addressed in GLSA 201708-01 at https://security.gentoo.org/glsa/201708-01 by GLSA coordinator Yury German (BlueKnight). |
From ${URL} : Today Internet Systems Consortium disclosed three security vulnerabilities in BIND which had been previously announced to the distros@...ts.openwall.org list: CVE-2017-3136, CVE-2017-3137, and CVE-2017-3138 are now public and details can be found in our knowledge base: https://kb.isc.org/category/74/0/10/Software-Products/BIND9/Security-Advisories/ New software releases have been issued containing these security fixes; they are available from our download page at http://www.isc.org/downloads @maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.