oss-security - Four BIND vulnerabilities have been disclosed today (11 January) that are fixed in new security releases

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <088406a2-6476-a79d-f148-f63e31b4c974@isc.org>
Date: Wed, 11 Jan 2017 15:06:00 -0900
From: ISC Security Officer <security-officer@....org>
To: oss-security@...ts.openwall.com
Subject: Four BIND vulnerabilities have been disclosed today (11 January) that
 are fixed in new security releases

ISC has issued new security releases of BIND today, which correct
three exploitable vulnerabilities discovered in the course of our
internal fuzz-testing and an additional exploitable vulnerability
reported to us by a contributor.

The issues are:

   CVE-2016-9131
   CVE-2016-9147
   CVE-2016-9444
   CVE-2016-9778

and details about each can be found in the BIND Security Advisories
section of the ISC Knowledge Base:

https://kb.isc.org/category/74/0/10/Software-Products/BIND9/Security-Advisories/

New security releases have been issued which correct the vulnerabilities.
These are available via the http://www.isc.org/downloads web page:

   BIND 9.9.9-P5
   BIND 9.10.4-P5
   BIND 9.11.0-P2

We encourage all parties using or distributing BIND to upgrade to these
versions as soon as possible so that they may be protected from the
vulnerabilities now that they have been publicly disclosed.

Michael McNally
ISC Security Officer

Download attachment "signature.asc" of type "application/pgp-signature" (496 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.