FSA/F7/FEDORA-2007-0668

[SECURITY] Fedora 7 Update: perl-Net-DNS-0.60-1.fc7
Fedora Update Notification FEDORA-2007-0668 2007-06-25 16:27:14

Name       : perl-Net-DNS Product    : Fedora 7 Version    : 0.60 Release    : 1.fc7 Summary    : DNS resolver modules for Perl Description : Net::DNS is a collection of Perl modules that act as a Domain Name System (DNS) resolver. It allows the programmer to perform DNS queries that are beyond the capabilities of gethostbyname and gethostbyaddr.

The programmer should be somewhat familiar with the format of a DNS packet and its various sections. See RFC 1035 or DNS and BIND (Albitz & Liu) for details.

Update Information:

This brings F-7 up to date with the latest changes to Net::DNS. See the project page here:

http://search.cpan.org/~olaf/Net-DNS-0.60/

The change for this upstream issue is included:

http://rt.cpan.org/Public/Bug/Display.html?id=23961

Since this fix has security implications (making DNS spoofing more difficult), pushing updates to all current versions of fedora.

Note - I know of no exploits for the security issue described above.

ChangeLog:

- Upgrade to latest upstream version - 0.60
 * Sat Jun 23 2007 Robin Norwood  - 0.60-1

References:

[ 1 ] Bug #245458 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245458

Updated packages:

0aa8c6391fae9025d3cbaa5ddb127acafef458f1 perl-Net-DNS-0.60-1.fc7.ppc64.rpm 8645ba30b0e8b0fa08f964022273135663714287 perl-Net-DNS-debuginfo-0.60-1.fc7.ppc64.rpm 397524deb1cadfdd955e44a57c5dce65523603e4 perl-Net-DNS-0.60-1.fc7.i386.rpm 6fdba25ab2d704097b34e2bfa3063178040017e2 perl-Net-DNS-debuginfo-0.60-1.fc7.i386.rpm 70d16b94033f5bd8957319f5215deca9f83eabb9 perl-Net-DNS-debuginfo-0.60-1.fc7.x86_64.rpm 0316cf1a363c99351c226114d9fceca35ab8f061 perl-Net-DNS-0.60-1.fc7.x86_64.rpm 79124a3a231093fe11bd852e2d28a59738911d6b perl-Net-DNS-0.60-1.fc7.ppc.rpm b9e0ba0d0e32de761e0ffa13483b1e1ee58d4d24 perl-Net-DNS-debuginfo-0.60-1.fc7.ppc.rpm 71d6e8d49da69fbc4d0c3dc796e1ae2803768135 perl-Net-DNS-0.60-1.fc7.src.rpm

This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://docs.fedoraproject.org/yum/.