-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] bind (SSA:2014-175-01) New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/bind-9.9.5_P1-i486-1_slack14.1.txz: Upgraded. This fixes security issues and other bugs. Please note that the first CVE only affects Windows, and the second one was claimed to be fixed by an earlier version of BIND. But we'll update anyway just in case. :-) For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6230 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 13.0: ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/bind-9.8.7_P1-i486-1_slack13.0.txz Updated package for Slackware x86_64 13.0: ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/bind-9.8.7_P1-x86_64-1_slack13.0.txz Updated package for Slackware 13.1: ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/bind-9.8.7_P1-i486-1_slack13.1.txz Updated package for Slackware x86_64 13.1: ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/bind-9.8.7_P1-x86_64-1_slack13.1.txz Updated package for Slackware 13.37: ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/bind-9.8.7_P1-i486-1_slack13.37.txz Updated package for Slackware x86_64 13.37: ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/bind-9.8.7_P1-x86_64-1_slack13.37.txz Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/bind-9.9.5_P1-i486-1_slack14.0.txz Updated package for Slackware x86_64 14.0: ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/bind-9.9.5_P1-x86_64-1_slack14.0.txz Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/bind-9.9.5_P1-i486-1_slack14.1.txz Updated package for Slackware x86_64 14.1: ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/bind-9.9.5_P1-x86_64-1_slack14.1.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/bind-9.9.5_P1-i486-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/bind-9.9.5_P1-x86_64-1.txz MD5 signatures: +-------------+ Slackware 13.0 package: 68c347027ac6ce76dffa0812bf5cba92 bind-9.8.7_P1-i486-1_slack13.0.txz Slackware x86_64 13.0 package: 513cf5eca63726b3d25415b541292748 bind-9.8.7_P1-x86_64-1_slack13.0.txz Slackware 13.1 package: 859959231b9fd16872a81c0160b77ddb bind-9.8.7_P1-i486-1_slack13.1.txz Slackware x86_64 13.1 package: fb2de1c5f593b19549b3d2de13d6fbdd bind-9.8.7_P1-x86_64-1_slack13.1.txz Slackware 13.37 package: 2b31ddca74fe5a34c6a4618e68d47318 bind-9.8.7_P1-i486-1_slack13.37.txz Slackware x86_64 13.37 package: 5d2f7205a31006ca2c03f0ef89b0d8f3 bind-9.8.7_P1-x86_64-1_slack13.37.txz Slackware 14.0 package: aa3435f95524c2203169a5fd52bfa72c bind-9.9.5_P1-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 9899fae00a73c1bd2fe798dc21839fa3 bind-9.9.5_P1-x86_64-1_slack14.0.txz Slackware 14.1 package: a1598e727c87f55cd249ec5f4ef12c36 bind-9.9.5_P1-i486-1_slack14.1.txz Slackware x86_64 14.1 package: f908655cd6bb3e9894b77fb814efd706 bind-9.9.5_P1-x86_64-1_slack14.1.txz Slackware -current package: 9c0c516579affda8a63a90c9f5b8df30 n/bind-9.9.5_P1-i486-1.txz Slackware x86_64 -current package: 7eb5432da1619a9a1172d73896e8fb9b n/bind-9.9.5_P1-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg bind-9.9.5_P1-i486-1_slack14.1.txz Then, restart the name server: # /etc/rc.d/rc.bind restart +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com +------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. | +------------------------------------------------------------------------+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlOqAvcACgkQakRjwEAQIjPzGwCglCJA/IOZi+3dE5HF31BtShna 3L0An0d/yvi5nJyNGPjJZKOMZTF41LDs =kMxB -----END PGP SIGNATURE-----