==========================================================================
Ubuntu Security Notice USN-3893-2
February 25, 2019

bind9 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 12.04 ESM

Summary:

Several security issues were fixed in Bind.

Software Description:
– bind9: Internet Domain Name Server

Details:

USN-3893-1 fixed a vulnerability in Bind. This update provides
the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 It was discovered that Bind incorrectly handled certain trust anchors
 when used with the “managed-keys” feature. A remote attacker could
 possibly use this issue to cause Bind to crash, resulting in a denial
 of service. (CVE-2018-5745)

 It was discovered that Bind incorrectly handled certain controls for
 zone transfers, contrary to expectations. (CVE-2019-6465)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  bind9                           1:9.8.1.dfsg.P1-4ubuntu0.27

In general, a standard system update will make all the necessary
changes.

References:
  https://usn.ubuntu.com/usn/usn-3893-2
  https://usn.ubuntu.com/usn/usn-3893-1
  CVE-2018-5745, CVE-2019-6465—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=/evz
—–END PGP SIGNATURE—–
—