USN-3683-1: Bind vulnerability

Releases

• Ubuntu 18.04 ESM

Packages

• bind9 - Internet Domain Name Server

Details

Andrew Skalski discovered that Bind could incorrectly enable recursion
when the "allow-recursion" setting wasn't specified. This issue could
improperly permit recursion to all clients, contrary to expectations.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04

• bind9 - 1:9.11.3+dfsg-1ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2018-5738