USN-3346-2: Bind regression

Ubuntu Security Notice USN-3346-2

18th September, 2017

bind9 regression

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 17.04



• Ubuntu 16.04 LTS



• Ubuntu 14.04 LTS

Summary

USN-3346-1 introduced a regression in Bind.

Software description

• bind9
  - Internet Domain Name Server
  
  

Details

USN-3346-1 fixed vulnerabilities in Bind. The fix for )

Clément Berthaux discovered that Bind did not correctly check TSIG
authentication for zone transfer requests. An attacker could use this
to improperly transfer entire zones. (





.

After a standard system update you need to restart Bind to make
all the necessary changes.

References

LP: 1717981