なんか、DNSSEC 関係の脆弱性 patch の続きらしいです。"Severity: Medium " とのことです。
Internet Systems Consortium https://www.isc.org/downloadables/11
> BIND | Internet Systems Consortium
(Snip)
> BIND 9.6.1-P3 is a Current - Production Release, published 19 January 2010.
> Includes BIND9 DNSSEC security patches VU#418861(updated) & VU#360341
(Snip)
Internet Systems Consortium https://www.isc.org/advisories/CVE2009-4022
> BIND 9 Cache Update from Additional Section (Updated 19Jan2010)
Internet Systems Consortium https://www.isc.org/advisories/CVE2010-0097
> BIND 9 DNSSEC validation code could cause bogus NXDOMAIN responses
Internet Systems Consortium ftp://ftp.isc.org/isc/bind9/9.6.1-P3/BIND9.6.1-P3.zip
(VirusTotal、Result: 0/41 (0%))
Internet Systems Consortium ftp://ftp.isc.org/isc/bind9/9.6.1-P3/9.6.1-P3
> BIND 9.6.1-P3 is now available.
(関連)
株式会社日本レジストリサービス http://jprs.jp/tech/security/bind9-vuln-bogus-nxdomain.html
> BIND 9の脆弱性を利用したサービス不能(DoS)攻撃について
The SANS™ Institute http://isc.sans.org/diary.html?storyid=8029
> Security Patch for for BIND 9.6.1 Released
The SANS™ Institute http://isc.sans.org/diary.html?storyid=7636
> BIND Security Advisory (DNSSEC only)
http://d.hatena.ne.jp/TsuSUZUKI/20091125/1259140710
※ BIND 9.6.1-P2
http://d.hatena.ne.jp/TsuSUZUKI/20090730/1248925536
※ BIND 9.6.1-P1
http://d.hatena.ne.jp/TsuSUZUKI/20090613/1244887586
※ BIND 9.6.1
http://d.hatena.ne.jp/TsuSUZUKI/20090108/1231421587
※ BIND 9.6.0-P1
いじょうです。
-
- -
