WINDOWS CENTER: ubuntu-security-announce Digest, Vol 63, Issue 2

Send ubuntu-security-announce mailing list submissions to
ubuntu-security-announce@lists.ubuntu.com

To subscribe or unsubscribe via the World Wide Web, visit
https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
or, via email, send a message with subject or body 'help' to
ubuntu-security-announce-request@lists.ubuntu.com

You can reach the person managing the list at
ubuntu-security-announce-owner@lists.ubuntu.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of ubuntu-security-announce digest..."

Today's Topics:

1. [USN-865-1] Bind vulnerability (Marc Deslauriers)

----------------------------------------------------------------------

Message: 1
Date: Mon, 07 Dec 2009 09:39:49 -0500
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Subject: [USN-865-1] Bind vulnerability
To: ubuntu-security-announce@lists.ubuntu.com
Cc: full-disclosure@lists.grok.org.uk, "bugtraq@securityfocus.com"
<bugtraq@securityfocus.com>
Message-ID: <1260196789.3803.19.camel@mdlinux.technorage.com>
Content-Type: text/plain; charset="utf-8"

===========================================================
Ubuntu Security Notice USN-865-1 December 07, 2009
bind9 vulnerability
CVE-2009-4022
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
libdns23 1:9.3.2-2ubuntu1.9

Ubuntu 8.04 LTS:
libdns36 1:9.4.2.dfsg.P2-2ubuntu0.4

Ubuntu 8.10:
libdns44 1:9.5.0.dfsg.P2-1ubuntu3.4

Ubuntu 9.04:
libdns46 1:9.5.1.dfsg.P2-1ubuntu0.3

Ubuntu 9.10:
libdns53 1:9.6.1.dfsg.P1-3ubuntu0.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Michael Sinatra discovered that Bind did not correctly validate certain
records added to its cache. When DNSSEC validation is in use, a remote
attacker could exploit this to spoof DNS entries and poison DNS caches.
Among other things, this could lead to misdirected email and web traffic.

Updated packages for Ubuntu 6.06 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.3.2-2ubuntu1.9.diff.gz
Size/MD5: 107716 730ae2b522410ce9f626eba005274c43
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.3.2-2ubuntu1.9.dsc
Size/MD5: 783 8d03dccc13984711f013d99347fbfd81
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.3.2.orig.tar.gz
Size/MD5: 5302112 55e709501a7780233c36e25ccd15ece2

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.3.2-2ubuntu1.9_all.deb
Size/MD5: 181134 620434575b50b094e25aedfe625f2b7e

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

powerpc architecture (Apple Macintosh G3/G4/G5):

sparc architecture (Sun SPARC/UltraSPARC):

Updated packages for Ubuntu 8.04 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.4.2.dfsg.P2-2ubuntu0.4.diff.gz
Size/MD5: 234862 8fe53f5995d58044303b881205752018
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.4.2.dfsg.P2-2ubuntu0.4.dsc
Size/MD5: 1000 1ad32e9bd97f982d8340b92e202610c4
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.4.2.dfsg.P2.orig.tar.gz
Size/MD5: 5013832 9fe376b7121db146b19c6b5b248436df

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.4.2.dfsg.P2-2ubuntu0.4_all.deb
Size/MD5: 240886 cd0800990ce29d04aa50da747bfb56a6

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

lpia architecture (Low Power Intel Architecture):

powerpc architecture (Apple Macintosh G3/G4/G5):

sparc architecture (Sun SPARC/UltraSPARC):

Updated packages for Ubuntu 8.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.5.0.dfsg.P2-1ubuntu3.4.diff.gz
Size/MD5: 269095 8d53303c6cf8d9c65ebf1a7197dbd033
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.5.0.dfsg.P2-1ubuntu3.4.dsc
Size/MD5: 1563 1afcac9fe0f644047cf62322a9965fc9
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.5.0.dfsg.P2.orig.tar.gz
Size/MD5: 5186028 7159b73a02d69cbe741dd2e1d6b56e71

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.5.0.dfsg.P2-1ubuntu3.4_all.deb
Size/MD5: 255722 7d69fff7befabc3472c2066924c024a5

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

lpia architecture (Low Power Intel Architecture):

powerpc architecture (Apple Macintosh G3/G4/G5):

sparc architecture (Sun SPARC/UltraSPARC):

Updated packages for Ubuntu 9.04:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.5.1.dfsg.P2-1ubuntu0.3.diff.gz
Size/MD5: 226750 6ea6aae5b89bfed9807fb596d7f1fc9d
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.5.1.dfsg.P2-1ubuntu0.3.dsc
Size/MD5: 1593 8d437dd53108dd31d970191065de2a33
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.5.1.dfsg.P2.orig.tar.gz
Size/MD5: 5213913 269d057c9a2a8f2ea3fc39b64330a3b7

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.5.1.dfsg.P2-1ubuntu0.3_all.deb
Size/MD5: 262458 5fb335a6f407533f370d7c6b3792121f

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

lpia architecture (Low Power Intel Architecture):

powerpc architecture (Apple Macintosh G3/G4/G5):

sparc architecture (Sun SPARC/UltraSPARC):

Updated packages for Ubuntu 9.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.6.1.dfsg.P1-3ubuntu0.2.diff.gz
Size/MD5: 223408 0522e67fb9ec375a1bbc6ad81d836c36
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.6.1.dfsg.P1-3ubuntu0.2.dsc
Size/MD5: 1634 5b231c4a38f98d30d30a59cdac212f71
http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9_9.6.1.dfsg.P1.orig.tar.gz
Size/MD5: 5111118 164a8f8147ded4bbf4b0e9328f124e9f

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/b/bind9/bind9-doc_9.6.1.dfsg.P1-3ubuntu0.2_all.deb
Size/MD5: 277852 d9529d819a6cc2ef01df1cdbb2785ce8

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

lpia architecture (Low Power Intel Architecture):

powerpc architecture (Apple Macintosh G3/G4/G5):

sparc architecture (Sun SPARC/UltraSPARC):

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20091207/9a543451/attachment.pgp

------------------------------

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

End of ubuntu-security-announce Digest, Vol 63, Issue 2
*******************************************************

News

Monday, December 07, 2009

ubuntu-security-announce Digest, Vol 63, Issue 2

No comments:

WINDOWS CENTER

Blog Archive