[Cucumber-linux-security] bind-client (security update is available)

[Scott C. <sc...@cu...>]

  Update Information

A security update is available for bind-client for the following
versions of Cucumber Linux:

  * 1.0
  * 1.1 Beta

Here are the details from the Cucumber 1.0 changelog:

+----------------+
Wed Jan 17 09:36:12 EST 2018
net-base/bind-client upgraded from 9.10.4_P4 to 9.10.6_P1 to address
	CVE-2017-3145, CVE-2017-3143 and CVE-2017-3140. It is unclear whether
	the bind client is affected by any of these vulnerabilities, or if only
	the bind server is affected. It is more likely that only the bind server
	is affected; however, we will upgrade to be safe. For more information
	see:
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3145
		http://security.cucumberlinux.com/security/details.php?id=226
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3143
		http://security.cucumberlinux.com/security/details.php?id=228
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3140
		http://security.cucumberlinux.com/security/details.php?id=230
		https://lists.isc.org/pipermail/bind-announce/2018-January/001075.html
* SECURITY FIX *
+----------------+

------------------------------------------------------------------------


  CLD and CVE Information

This update is associated with the following Cucumber Linux Deficiency
(CLD) and CVE numbers:

  * CLD-226 [CVE-2017-3145]
    (http://security.cucumberlinux.com/security/details.php?id=226)
  * CLD-228 [CVE-2017-3143]
    (http://security.cucumberlinux.com/security/details.php?id=228)
  * CLD-230 [CVE-2017-3140]
    (http://security.cucumberlinux.com/security/details.php?id=230)

More information about these CLDs can be found at their respective pages
on the Cucumber Linux Security Advisory Tracker (these are the URLs in
parenthesis above).

------------------------------------------------------------------------


  Installing the Update

The updated package can be installed via Pickle by running the following
commands (as root):

# pickle --update
# pickle

Make sure bind-client is selected on the update list, and then select
Ok. Pickle will then install the updated package.

If you prefer to download the updated package manually, it can be found
on the mirror at http://mirror.cucumberlinux.com/cucumber/.

------------------------------------------------------------------------
The Cucumber Linux Security Team
cuc...@li...
<mailto:cuc...@li...>
http://www.cucumberlinux.com/security.php