Bug 684706 (CVE-2018-5743, CVE-2019-6467)

Summary:	<net-dns/bind-9.14.4: multiple vulnerabilities
Product:	Gentoo Security	Reporter:	D'juan McDonald (domhnall) <flopwiki>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	CC:	blackace, idl0r, voron1
Priority:	Normal	Flags:	stable-bot: sanity-check+
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://kb.isc.org/docs/aa-00913
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=688388
Whiteboard:	B3 [noglsa cve]
Package list:	net-dns/bind-tools-9.14.4 net-dns/bind-9.14.4	Runtime testing required:	---

Description D'juan McDonald (domhnall) 2019-04-29 07:45:40 UTC

(https://kb.isc.org/docs/cve-2018-5743):
CVE-2018-5743: Limiting simultaneous TCP clients is ineffective

(https://kb.isc.org/docs/cve-2019-6467):
CVE-2019-6467: An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c

(https://kb.isc.org/docs/cve-2019-6468):
CVE-2019-6468: BIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is used


version of BIND containing a fix:

BIND 9.12.4-P1


Gentoo Security Padawan
(domhnall)

Comment 1 D'juan McDonald (domhnall) 2019-04-29 08:03:55 UTC

>CVE-2019-6468: BIND Supported Preview Edition can exit with an assertion failure >if nxdomain-redirect is used

Sorry, doesn't apply to Gentoo's version. Removing alias.

Comment 2 Aaron Bauman (RETIRED) gentoo-dev

2019-05-26 03:06:54 UTC

sec bug should not depend on requests for ebuilds to be bumped.  We will handle it all here.

Comment 3 Matthew Kasa (RETIRED) gentoo-dev

2019-05-26 03:09:40 UTC

BIND 9.14.2 is upstream's Current-Stable and contains fixes for both CVE-2018-5743 and CVE-2019-6467.

Comment 4 Aaron Bauman (RETIRED) gentoo-dev

2019-08-05 23:35:40 UTC

arm64 stable (required a new dep, but our profiles will go stable soon... better CI checks)

Comment 5 Mikle Kolyada (RETIRED) archtester

2019-08-07 09:19:32 UTC

amd64 stable

Comment 6 Mikle Kolyada (RETIRED) archtester

2019-08-07 09:20:22 UTC

alpha stable

Comment 7 Mikle Kolyada (RETIRED) archtester

2019-08-07 09:20:47 UTC

arm stable

Comment 8 Mikle Kolyada (RETIRED) archtester

2019-08-07 09:21:11 UTC

ia64 stable

Comment 9 Mikle Kolyada (RETIRED) archtester

2019-08-07 09:21:41 UTC

ppc stable

Comment 10 Mikle Kolyada (RETIRED) archtester

2019-08-07 09:22:42 UTC

ppc64 stable

Comment 11 Mikle Kolyada (RETIRED) archtester

2019-08-07 09:23:05 UTC

hppa stable

Comment 12 Mikle Kolyada (RETIRED) archtester

2019-08-07 09:23:36 UTC

sparc stable

Comment 13 Mikle Kolyada (RETIRED) archtester

2019-08-07 09:24:01 UTC

x86 stable