Re: [CentOS] Bind 9 pharming security hole

On 7/26/07, Jay Leafey jay.leafey@mindless.com wrote:

Indunil Jayasooriya wrote:

...

Hi,

I am running bind on centOS5. I use RPM. Is there a patch ? Any idea to apply the patch?

From "rpm -q --changelog bind-libs-9.3.3-9.0.1.el5":

...

• Thu Jul 19 2007 Adam Tkac <atkac redhat com> 30:9.3.3-9.0.1

• fixed cryptographically weak query id generator (CVE-2007-2926)

If you are keeping up-to-date using yum you should have gotten this version today.

Yeah, I keep my CENTOS5 box uptodate with yum. new vershion ofg bind has already downloaded.

Pls see below.

[root@mailgw ~]# rpm -qa |grep bind bind-utils-9.3.3-9.0.1.el5 bind-9.3.3-9.0.1.el5 bind-libs-9.3.3-9.0.1.el5 bind-chroot-9.3.3-9.0.1.el5

Thanks for it.