RedHat安全公告升级BIND软件包

Red Hat 安全公告升级 BIND 软件包

发布时间：2002-08-13 信息来源：管理员

BIND(Berkeley Internet Name Domain)是一个在UNIX/Linux系统上实现的域名解析服务软件包。BIND软件包含有一个用来将主机名解析为 IP 地址的 DNS 服务器，一个用于 DNS 服务器接口应用程序的解析二进制程序，以及其它的一些工具。然而在 DNS 解析二进制程序的多个执行过程中存在一个缓冲溢出缺陷。所有利用了有缺陷DNS解析二进制程序的应用软件也会受此缺陷影响。远程攻击者能利用此缺陷，通过发送恶意的DNS响应在有缺陷的系统上执行任意代码会进行拒绝服务攻击。 Red Hat Linux 操作系统本身并不含有和BIND解析二进制程序相关联的任何程序和软件。然而第三方代码可能受此影响。用户应立即升级BIND软件包，升级BIND软件包中包括了从 8.3.3 到 9.2.1 版本的补丁程序。受影响系统： Red Hat Linux 6.2 - alpha, i386, sparc Red Hat Linux 7.0 - alpha, i386 Red Hat Linux 7.1 - alpha, i386, ia64 Red Hat Linux 7.2 - i386, ia64 Red Hat Linux 7.3 - i386 攻击方法：暂无有效攻击代码解决方案：升级软件包 rpm -Fvh 代表你要用来更新的 RPMs。只有目前有安装的 RPMs 才可更新，那些没有安装过但是包含在 filenames 内的 RPMs 将不会被更新。注意，如果你目前所在目录下只包含想要的RPMs，你也可以使用万用字符(*.rpm)请注意，你也可以由Red Hat Network 取得更新，有各种更新的方式，要使用 Red Hat Network，可由以下指令激活 Red Hat Update Agent: up2date 这将激活一个互动的程序将您系统上适当的RPMs升级。取得这些更新后，需要重新激活服务器。 RPMs 需求： Red Hat Linux 6.2: SRPMS: ftp://updates.redhat.com/6.2/en/os/SRPMS/bind-9.2.1-0.6x.3.src.rpm alpha: ftp://updates.redhat.com/6.2/en/os/alpha/bind-9.2.1-0.6x.3.alpha.rpm ftp://updates.redhat.com/6.2/en/os/alpha/bind-devel-9.2.1-0.6x.3.alpha.rpm ftp://updates.redhat.com/6.2/en/os/alpha/bind-utils-9.2.1-0.6x.3.alpha.rpm i386: ftp://updates.redhat.com/6.2/en/os/i386/bind-9.2.1-0.6x.3.i386.rpm ftp://updates.redhat.com/6.2/en/os/i386/bind-devel-9.2.1-0.6x.3.i386.rpm ftp://updates.redhat.com/6.2/en/os/i386/bind-utils-9.2.1-0.6x.3.i386.rpm sparc: ftp://updates.redhat.com/6.2/en/os/sparc/bind-9.2.1-0.6x.3.sparc.rpm ftp://updates.redhat.com/6.2/en/os/sparc/bind-devel-9.2.1-0.6x.3.sparc.rpm ftp://updates.redhat.com/6.2/en/os/sparc/bind-utils-9.2.1-0.6x.3.sparc.rpm Red Hat Linux 7.0: SRPMS: ftp://updates.redhat.com/7.0/en/os/SRPMS/bind-9.2.1-0.70.2.src.rpm alpha: ftp://updates.redhat.com/7.0/en/os/alpha/bind-9.2.1-0.70.2.alpha.rpm ftp://updates.redhat.com/7.0/en/os/alpha/bind-devel-9.2.1-0.70.2.alpha.rpm ftp://updates.redhat.com/7.0/en/os/alpha/bind-utils-9.2.1-0.70.2.alpha.rpm i386: ftp://updates.redhat.com/7.0/en/os/i386/bind-9.2.1-0.70.2.i386.rpm ftp://updates.redhat.com/7.0/en/os/i386/bind-devel-9.2.1-0.70.2.i386.rpm ftp://updates.redhat.com/7.0/en/os/i386/bind-utils-9.2.1-0.70.2.i386.rpm Red Hat Linux 7.1: SRPMS: ftp://updates.redhat.com/7.1/en/os/SRPMS/bind-9.2.1-0.71.1.src.rpm alpha: ftp://updates.redhat.com/7.1/en/os/alpha/bind-9.2.1-0.71.1.alpha.rpm ftp://updates.redhat.com/7.1/en/os/alpha/bind-devel-9.2.1-0.71.1.alpha.rpm ftp://updates.redhat.com/7.1/en/os/alpha/bind-utils-9.2.1-0.71.1.alpha.rpm i386: ftp://updates.redhat.com/7.1/en/os/i386/bind-9.2.1-0.71.1.i386.rpm ftp://updates.redhat.com/7.1/en/os/i386/bind-devel-9.2.1-0.71.1.i386.rpm ftp://updates.redhat.com/7.1/en/os/i386/bind-utils-9.2.1-0.71.1.i386.rpm ia64: ftp://updates.redhat.com/7.1/en/os/ia64/bind-9.2.1-0.71.1.ia64.rpm ftp://updates.redhat.com/7.1/en/os/ia64/bind-devel-9.2.1-0.71.1.ia64.rpm ftp://updates.redhat.com/7.1/en/os/ia64/bind-utils-9.2.1-0.71.1.ia64.rpm Red Hat Linux 7.2: SRPMS: ftp://updates.redhat.com/7.2/en/os/SRPMS/bind-9.2.1-1.7x.2.src.rpm i386: ftp://updates.redhat.com/7.2/en/os/i386/bind-9.2.1-1.7x.2.i386.rpm ftp://updates.redhat.com/7.2/en/os/i386/bind-devel-9.2.1-1.7x.2.i386.rpm ftp://updates.redhat.com/7.2/en/os/i386/bind-utils-9.2.1-1.7x.2.i386.rpm ia64: ftp://updates.redhat.com/7.2/en/os/ia64/bind-9.2.1-1.7x.2.ia64.rpm ftp://updates.redhat.com/7.2/en/os/ia64/bind-devel-9.2.1-1.7x.2.ia64.rpm ftp://updates.redhat.com/7.2/en/os/ia64/bind-utils-9.2.1-1.7x.2.ia64.rpm Red Hat Linux 7.3: SRPMS: ftp://updates.redhat.com/7.3/en/os/SRPMS/bind-9.2.1-1.7x.2.src.rpm i386: ftp://updates.redhat.com/7.3/en/os/i386/bind-9.2.1-1.7x.2.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/bind-devel-9.2.1-1.7x.2.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/bind-utils-9.2.1-1.7x.2.i386.rpm ---------------- 验证: ----- MD5 sum Package Name -------------------------------------------------------------------------- d3cb5507f03b5c3ae0ca8438431668cf 6.2/en/os/SRPMS/bind-9.2.1-0.6x.3.src.rpm 4699fc5859d3db460308d78b3c639ab1 6.2/en/os/alpha/bind-9.2.1-0.6x.3.alpha.rpm 3703ae447f176c9635b06ba416234d2d 6.2/en/os/alpha/bind-devel-9.2.1-0.6x.3.alpha.rpm 7cf01632b96d72344ff921cea6e5c035 6.2/en/os/alpha/bind-utils-9.2.1-0.6x.3.alpha.rpm f6d2eea50c86f4298d002821cd0e8a7a 6.2/en/os/i386/bind-9.2.1-0.6x.3.i386.rpm f3b4874c903330e9eec59eeabf54721d 6.2/en/os/i386/bind-devel-9.2.1-0.6x.3.i386.rpm 187e69192927cd4fe0c4825f6e4677f0 6.2/en/os/i386/bind-utils-9.2.1-0.6x.3.i386.rpm 2bd9516e6d1babe34df6c89f5dc09c62 6.2/en/os/sparc/bind-9.2.1-0.6x.3.sparc.rpm 372eb8109d5bf5f34d6d8f0d4be84f9c 6.2/en/os/sparc/bind-devel-9.2.1-0.6x.3.sparc.rpm e5e48e3f19a0259d1e276bf8a0fa54a4 6.2/en/os/sparc/bind-utils-9.2.1-0.6x.3.sparc.rpm e68c53f5925b7c35c5b74d9e7a26b6ce 7.0/en/os/SRPMS/bind-9.2.1-0.70.2.src.rpm b11f6afa468633fbf30331c2a7159e88 7.0/en/os/alpha/bind-9.2.1-0.70.2.alpha.rpm ceac2fe1e64c89eb21a01fef91c906de 7.0/en/os/alpha/bind-devel-9.2.1-0.70.2.alpha.rpm ec2fdb6c3801db57093de8425438f54b 7.0/en/os/alpha/bind-utils-9.2.1-0.70.2.alpha.rpm 75b67e97aff499146c8d255bf4d643ca 7.0/en/os/i386/bind-9.2.1-0.70.2.i386.rpm c722c4d37e2d9605c9ad221fd79bea5a 7.0/en/os/i386/bind-devel-9.2.1-0.70.2.i386.rpm 3abc725df73e16c5603d8569228945d4 7.0/en/os/i386/bind-utils-9.2.1-0.70.2.i386.rpm a7f67aa2634f7343d5ef8b2bf1b46c2c 7.1/en/os/SRPMS/bind-9.2.1-0.71.1.src.rpm f163fca03e363c94557d3060388f4345 7.1/en/os/alpha/bind-9.2.1-0.71.1.alpha.rpm 91aa401d527cf8e94261fd9596dee029 7.1/en/os/alpha/bind-devel-9.2.1-0.71.1.alpha.rpm 773d26bfe83881c82c1f9a3afa6be100 7.1/en/os/alpha/bind-utils-9.2.1-0.71.1.alpha.rpm 49c0206a556473d5229a0fb744f6bc94 7.1/en/os/i386/bind-9.2.1-0.71.1.i386.rpm fc6f206e09d97076f5e6371ce1bdcba2 7.1/en/os/i386/bind-devel-9.2.1-0.71.1.i386.rpm 44d8567cd0ac0ffa5a01adb053b00827 7.1/en/os/i386/bind-utils-9.2.1-0.71.1.i386.rpm 03d4aa059210605b1e02676fab352a9c 7.1/en/os/ia64/bind-9.2.1-0.71.1.ia64.rpm 56e06d0c7dadcd738e34f32768b082a9 7.1/en/os/ia64/bind-devel-9.2.1-0.71.1.ia64.rpm d95373244ed90e0673ce7d68b02aebbf 7.1/en/os/ia64/bind-utils-9.2.1-0.71.1.ia64.rpm 56834b83e090ac25583e7b417c9ecef0 7.2/en/os/SRPMS/bind-9.2.1-1.7x.2.src.rpm 8636bdf02a5c862a8e7773447ced2a4c 7.2/en/os/i386/bind-9.2.1-1.7x.2.i386.rpm 35007eaef20eb645d6ca7c3e02cb10d8 7.2/en/os/i386/bind-devel-9.2.1-1.7x.2.i386.rpm b467c81cea2c6653df6bc816401b598c 7.2/en/os/i386/bind-utils-9.2.1-1.7x.2.i386.rpm c827f0a5a98101c15d9036b9a96f2d78 7.2/en/os/ia64/bind-9.2.1-1.7x.2.ia64.rpm b343a59470e182319db3616d251003ad 7.2/en/os/ia64/bind-devel-9.2.1-1.7x.2.ia64.rpm 2463224d2c2ed6eba0fbce4048e3f504 7.2/en/os/ia64/bind-utils-9.2.1-1.7x.2.ia64.rpm 56834b83e090ac25583e7b417c9ecef0 7.3/en/os/SRPMS/bind-9.2.1-1.7x.2.src.rpm 8636bdf02a5c862a8e7773447ced2a4c 7.3/en/os/i386/bind-9.2.1-1.7x.2.i386.rpm 35007eaef20eb645d6ca7c3e02cb10d8 7.3/en/os/i386/bind-devel-9.2.1-1.7x.2.i386.rpm b467c81cea2c6653df6bc816401b598c 7.3/en/os/i386/bind-utils-9.2.1-1.7x.2.i386.rpm 这些套件基于安全理由，均由 Red Hat 公司使用 GPG 签章，可至下列网址取得key： http://www.redhat.com/about/contact.html 你可以用以下指令来进行验证: rpm --checksig 如果你只想验证软件没有被更改或者损坏的话，可用以下指令检查md5sum： rpm --checksig --nogpg 附加信息： Advisory ID: RHSA-2002:133-13 CVE Names: CAN-2002-0651