This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============7916993515052576152==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="qdXNQKkhuhgd9M2RCbjdH8NgkItUJ9A2E"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--qdXNQKkhuhgd9M2RCbjdH8NgkItUJ9A2E
Content-Type: multipart/mixed;
 boundary="CRdjOrQLwmjxLCk6aXULhFSRjD2ONPtE7"
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: "ubuntu-security-announce@lists.ubuntu.com"
 <ubuntu-security-announce@lists.ubuntu.com>
Message-ID: <e2322bc3-58a3-ec91-3bea-fa8f514eef67@canonical.com>
Subject: [USN-3201-1] Bind vulnerabilities

--CRdjOrQLwmjxLCk6aXULhFSRjD2ONPtE7
Content-Type: text/plain; charset=utf-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-3201-1
February 16, 2017

bind9 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.10
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS

Summary:

Bind could be made to crash if it received specially crafted network
traffic.

Software Description:
- bind9: Internet Domain Name Server

Details:

It was discovered that Bind incorrectly handled rewriting certain query
responses when using both DNS64 and RPZ. A remote attacker could possibly
use this issue to cause Bind to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  bind9                           1:9.10.3.dfsg.P4-10.1ubuntu1.3

Ubuntu 16.04 LTS:
  bind9                           1:9.10.3.dfsg.P4-8ubuntu1.5

Ubuntu 14.04 LTS:
  bind9                           1:9.9.5.dfsg-3ubuntu0.13

Ubuntu 12.04 LTS:
  bind9                           1:9.8.1.dfsg.P1-4ubuntu0.21

In general, a standard system update will make all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-3201-1
  CVE-2017-3135

Package Information:
  https://launchpad.net/ubuntu/+source/bind9/1:9.10.3.dfsg.P4-10.1ubuntu1.3
  https://launchpad.net/ubuntu/+source/bind9/1:9.10.3.dfsg.P4-8ubuntu1.5
  https://launchpad.net/ubuntu/+source/bind9/1:9.9.5.dfsg-3ubuntu0.13
  https://launchpad.net/ubuntu/+source/bind9/1:9.8.1.dfsg.P1-4ubuntu0.21



--CRdjOrQLwmjxLCk6aXULhFSRjD2ONPtE7--

--qdXNQKkhuhgd9M2RCbjdH8NgkItUJ9A2E
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=u5ID
-----END PGP SIGNATURE-----

--qdXNQKkhuhgd9M2RCbjdH8NgkItUJ9A2E--


--===============7916993515052576152==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============7916993515052576152==--