==========================================================================
Ubuntu Security Notice USN-3201-1
February 16, 2017

bind9 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 16.10
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS
– Ubuntu 12.04 LTS

Summary:

Bind could be made to crash if it received specially crafted network
traffic.

Software Description:
– bind9: Internet Domain Name Server

Details:

It was discovered that Bind incorrectly handled rewriting certain query
responses when using both DNS64 and RPZ. A remote attacker could possibly
use this issue to cause Bind to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
bind9 1:9.10.3.dfsg.P4-10.1ubuntu1.3

Ubuntu 16.04 LTS:
bind9 1:9.10.3.dfsg.P4-8ubuntu1.5

Ubuntu 14.04 LTS:
bind9 1:9.9.5.dfsg-3ubuntu0.13

Ubuntu 12.04 LTS:
bind9 1:9.8.1.dfsg.P1-4ubuntu0.21

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-3201-1
CVE-2017-3135

Package Information:
https://launchpad.net/ubuntu/+source/bind9/1:9.10.3.dfsg.P4-10.1ubuntu1.3
https://launchpad.net/ubuntu/+source/bind9/1:9.10.3.dfsg.P4-8ubuntu1.5
https://launchpad.net/ubuntu/+source/bind9/1:9.9.5.dfsg-3ubuntu0.13
https://launchpad.net/ubuntu/+source/bind9/1:9.8.1.dfsg.P1-4ubuntu0.21

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=u5ID
—–END PGP SIGNATURE—–
—