==========================================================================
Ubuntu Security Notice USN-3893-2
February 25, 2019
bind9 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 12.04 ESM
Summary:
Several security issues were fixed in Bind.
Software Description:
– bind9: Internet Domain Name Server
Details:
USN-3893-1 fixed a vulnerability in Bind. This update provides
the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
It was discovered that Bind incorrectly handled certain trust anchors
when used with the “managed-keys” feature. A remote attacker could
possibly use this issue to cause Bind to crash, resulting in a denial
of service. (CVE-2018-5745)
It was discovered that Bind incorrectly handled certain controls for
zone transfers, contrary to expectations. (CVE-2019-6465)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 ESM:
bind9 1:9.8.1.dfsg.P1-4ubuntu0.27
In general, a standard system update will make all the necessary
changes.
References:
https://usn.ubuntu.com/usn/usn-3893-2
https://usn.ubuntu.com/usn/usn-3893-1
CVE-2018-5745, CVE-2019-6465—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2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=/evz
—–END PGP SIGNATURE—–
—
