bind9: CVE-2018-5743

From	Markus Wollny <markus.wollny@gmail.com>
Newsgroups	linux.debian.security
Subject	bind9: CVE-2018-5743
Date	2019-05-09 09:40 +0200
Message-ID	<xVLOO-3cj-15@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hello,

Is there an ETA on the fix for this bind9 vulnerability to be
available for Debian Stretch yet?

https://security-tracker.debian.org/tracker/CVE-2018-5743 says that
the stable branch is still vulnerable (fixed in buster/sid only), even
though the Debian bug report
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927932 is already
marked as closed.

I admit I am not all too familiar with usual Debian security
procedures in such cases, but as the bug is rated with a severity
rating of grave and it's now two weeks since the public disclosure, I
am starting to feel a little worried.

Kind regards

  Markus

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

bind9: CVE-2018-5743 Markus Wollny <markus.wollny@gmail.com> - 2019-05-09 09:40 +0200
  Re: bind9: CVE-2018-5743 Henrique de Moraes Holschuh <hmh@debian.org> - 2019-05-12 22:30 +0200

csiph-web