OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Mark_Andrews_at_isc.org
Date: Sat Nov 16 2002 - 23:59:42 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

                            BIND 8.3.4 Release

    BIND 8.3.4 is a security release. BIND 8.2.7 and BIND 4.9.11 are being
    released simultaneously.

    The recommended version to use is BIND 9.2.1. If for whatever reason you
    must run BIND 8, use nothing earlier than 8.2.7-REL, 8.3.4-REL. Do not
    under any circumstances run BIND 4.
    `
    Highlights vs. 8.3.3
            Security Fix DoS and buffer overrun.

    Highlights vs. 8.3.2
            Security Fix libbind. All applications linked against libbind
            need to re-linked.
            'rndc restart' now preserves named's arguments

    Highlights vs. BIND 8.3.1:
            dig, nslookup, host and nsupdate have improved IPv6 support.

    Highlights vs. BIND 8.3.0:

            Critical bug fix to prevent DNS storms. If you have BIND 8.3.0 you
            need to upgrade.

    the distribution files are:

    ftp://ftp.isc.org/isc/bind/src/8.3.4/bind-src.tar.gz
    ftp://ftp.isc.org/isc/bind/src/8.3.4/bind-doc.tar.gz
    ftp://ftp.isc.org/isc/bind/src/8.3.4/bind-contrib.tar.gz

    the pgp signature files are:

    ftp://ftp.isc.org/isc/bind/src/8.3.4/bind-src.tar.gz.asc
    ftp://ftp.isc.org/isc/bind/src/8.3.4/bind-doc.tar.gz.asc
    ftp://ftp.isc.org/isc/bind/src/8.3.4/bind-contrib.tar.gz.asc

    the md5 checksums are:

    MD5 (bind-contrib.tar.gz) = c962c661f408932763e94142ee336156
    MD5 (bind-contrib.tar.gz.asc) = 0c1091a21017edd3c98bf56c8c51afb3
    MD5 (bind-doc.tar.gz) = d1c7b87c2575e14e76223d1e89c5568a
    MD5 (bind-doc.tar.gz.asc) = 83f7927673c6af1f6e30b64b481e4270
    MD5 (bind-src.tar.gz) = 214a5116782f439534b9d47cba88d44b
    MD5 (bind-src.tar.gz.asc) = 74b9983b8bfd2b06462429fb2a6e66ba

    Windows NT / Windows 2000 binary distribution.

    ftp://ftp.isc.org/isc/bind/contrib/ntbind-8.3.4/readme1st.txt
    ftp://ftp.isc.org/isc/bind/contrib/ntbind-8.3.4/BIND8.3.4.zip
    ftp://ftp.isc.org/isc/bind/contrib/ntbind-8.3.4/BIND8.3.4.zip.asc

    ftp://ftp.isc.org/isc/bind/contrib/ntbind-8.3.4/readme1sttools.txt
    ftp://ftp.isc.org/isc/bind/contrib/ntbind-8.3.4/BIND8.3.4Tools.zip
    ftp://ftp.isc.org/isc/bind/contrib/ntbind-8.3.4/BIND8.3.4Tools.zip.asc

    the md5 checksums are:

    MD5 (readme1st.txt) = ac4ce260f151dc1ab393c145f4288bba
    MD5 (BIND8.3.4.zip) = bd15fc096aae30c235fba9c642819f45
    MD5 (BIND8.3.4.zip.asc) = 62c109ff99ad059df4d0db208f55f64f

    MD5 (readme1sttools.txt) = 93cbeb616b1eb79a40b4eec4a8b088be
    MD5 (BIND8.3.4Tools.zip) = 07679236ef7f7f00aac4f41c3e1d616a
    MD5 (BIND8.3.4Tools.zip.asc) = c7f24354b7a1b5a220da3dd70c791770

    top of CHANGES says:

            --- 8.3.4-REL released --- (Thu Nov 14 05:45:26 PST 2002)

    1469. [bug] buffer length calculation for PX was wrong.

    1468. [bug] ns_name_ntol() could overwite a zero length buffer.

    1466. [bug] large ENDS UDP buffer size could trigger a assertion.

    1465. [bug] possible NULL pointer dereference in db_sec.c

    1464. [bug] the buffer used to construct the -ve record was not
                            big enough for all possible SOA records. use pointer
                            arithmetic to calculate the remaining size in this
                            buffer.

    1463. [bug] use serial space arithmetic to determine if a SIG is
                            too old, in the future or has internally constistant
                            times.

    1462. [bug] write buffer overflow in make_rr().

            --- 8.3.3-REL released --- (Wed Jun 26 21:15:43 PDT 2002)