"2017-06-29" 付けリリース。(現地時間) 9.11.1-P2 も出ています。
Internet Systems Consortium https://ftp.isc.org/isc/bind9/9.10.5-P2/
> Index of /isc/bind9/9.10.5-P2
Internet Systems Consortium ftp://ftp.isc.org/isc/bind9/9.10.5-P2/
> ftp://ftp.isc.org/isc/bind9/9.10.5-P2/ の一覧
リリースノート:
Internet Systems Consortium https://kb.isc.org/article/AA-01508/81/BIND-9.10.5-P2-Release-Notes.html
> BIND 9.10.5-P2 Release Notes | Internet Systems Consortium Knowledge Base
※ CVE-2017-3142 、 CVE-2017-3143 。
Internet Systems Consortium https://kb.isc.org/article/AA-01507/81/BIND-9.11.1-P2-Release-Notes.html
> BIND 9.11.1-P2 Release Notes | Internet Systems Consortium Knowledge Base
Internet Systems Consortium https://kb.isc.org/article/AA-00913
> BIND 9 Security Vulnerability Matrix | Internet Systems Consortium Knowledge Base
(関連)
Internet Systems Consortium https://ftp.isc.org/isc/bind9/9.10.5-P2/BIND9.10.5-P2.x86.zip
> Index of /isc/bind9/9.10.5-P2
( VirusTotal )
Internet Systems Consortium https://ftp.isc.org/isc/bind9/9.10.5-P2/BIND9.10.5-P2.x64.zip
> Index of /isc/bind9/9.10.5-P2
( VirusTotal )
Internet Systems Consortium https://ftp.isc.org/isc/bind9/9.10.5-P2/BIND9.10.5-P2.x86.zip.asc
> Index of /isc/bind9/9.10.5-P2
Internet Systems Consortium https://ftp.isc.org/isc/bind9/9.10.5-P2/BIND9.10.5-P2.x64.zip.asc
> Index of /isc/bind9/9.10.5-P2
Internet Systems Consortium https://www.isc.org/downloads/software-support-policy/openpgp-key/
> OpenPGP Key | Internet Systems Consortium
※ "ISC Code Signing Key 2017 & 2018 (codesign@isc.org)" 。
※ "pub 4096R/5CF02E57 作成: 2016-10-05 有効期限: 2019-02-01 利用法: SC" 。
・・・
株式会社日本レジストリサービス(JPRS) https://jprs.jp/tech/security/2017-06-30-bind9-vuln-circumvent-tsig-auth-axfr.html
> BIND 9.xの脆弱性(TSIG認証の迂回によるゾーンデータの流出)について(CVE-2017-3142)
株式会社日本レジストリサービス(JPRS) https://jprs.jp/tech/security/2017-06-30-bind9-vuln-circumvent-tsig-auth-dynamic-update.html
> (緊急)BIND 9.xの脆弱性(TSIG認証の迂回によるゾーンデータの操作)について(CVE-2017-3143)
・・・
http://d.hatena.ne.jp/TsuSUZUKI/20170618/1497774461
※ BIND 9.10.5-P1
いじょうです。
-
- -