DESCRIPTION

CERT reports multiple vulnerabilities bind, version 8.2 and earlier. The problems include two buffer overflows, an input validation error, and leaks via environment variables. For further details please see the CERT advisory.

SOLUTION

Download the following RPM packages to the NetWinder into a temporary directory, then install them with the command "rpm -Uvh *.rpm". Be sure there are no other files ending in ".rpm" in the temporary directory. See http://www.netwinder.org/security/install.html for more help.

Required packages

http://www.netwinder.org/updates/3.1-15/armv4l/bind-8.2.3-1_nw1.armv4l.rpm
http://www.netwinder.org/updates/3.1-15/armv4l/bind-utils-8.2.3-1_nw1.armv4l.rpm

Optional packages

http://www.netwinder.org/updates/3.1-15/armv4l/bind-devel-8.2.3-1_nw1.armv4l.rpm
http://www.netwinder.org/updates/3.1-15/SRPMS/bind-8.2.3-1_nw1.src.rpm

REFERENCES