USN-3683-1: Bind vulnerability

13 June 2018

bind9 vulnerability

A security issue affects these releases of Ubuntu and its derivatives:

Summary

Bind could incorrectly enable recursion.

Software Description

• bind9 - Internet Domain Name Server

Details

Andrew Skalski discovered that Bind could incorrectly enable recursion when the "allow-recursion" setting wasn’t specified. This issue could improperly permit recursion to all clients, contrary to expectations.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04 LTS

bind9 - 1:9.11.3+dfsg-1ubuntu1.1

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary changes.

References

from Ubuntu Security Notices https://ift.tt/2yaBKFS