SA-FreeBSD bind9 漏洞 - BBS

Lucy avatar
By Lucy
at 2010-01-07T09:11

Table of Contents

我有機器是6.4-STABLE

1/6 SA 說BIND 有漏洞

我想要使用patch 的方式修補漏洞

但是我pkg_info | grep name 或pkg_info |grep bind

都沒有看到類似bind 的套件

但我確定我的dns 服務是正常的 -,-

有前輩可以告訴我, 是否6.4 預設就有bind 服務, 不需另外安裝bind9 套件

若是的話, 那是否這bind9 漏洞不需更新

因為這台機器跑好久了, 當初dns services 建置時, 也忘了當初有另外裝bind 是否 XD

我會po文是因為

我在上patch 時............在SA 提到步驟

1# cd /usr/src
2# patch < /path/to/patch
3# cd /usr/src/lib/bind
4# make obj && make depend && make && make install
5# cd /usr/src/usr.sbin/named
6# make obj && make depend && make && make install
7# /etc/rc.d/named restart


而我在執行 步驟6 時, 在make 時出現以下錯誤, 我才回過頭去檢查 XD


cc -O2 -fno-strict-aliasing -pipe -DVERSION='"9.3.6-P1"' -DHAVE_CONFIG_H -DWANT_IPV6 -DOPENSSL -DUSE_MD5 -DNS_LOCALSTATEDIR='"/var"' -DNS_SYSCONFDIR='"/etc/namedb"' -DNAMED_CONFFILE='"/etc/namedb/named.conf"' -DRNDC_CONFFILE='"/etc/namedb/rndc.conf"' -DRNDC_KEYFILE='"/etc/namedb/rndc.key"' -I/usr/src/usr.sbin/named/../../lib/bind -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/bind9/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/dns/include/dst
-I/usr/src/usr.sbin/named/../../contrib/bind9/lib/dns/include -I/usr/src/usr.sbin/named/../../lib/bind/dns -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/isccc/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/isccfg/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/isc/unix/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/isc/nothreads/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/isc/include -I/usr/src/usr.sbin/named/../../lib/bind/isc
-I/usr/src/usr.sbin/named/../../contrib/bind9/lib/lwres/unix/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/lwres/include -I/usr/src/usr.sbin/named/../../lib/bind/lwres -I/usr/src/usr.sbin/named/../../contrib/bind9/bin/named/unix/include -I/usr/src/usr.sbin/named/../../contrib/bind9/bin/named/include -I/usr/src/usr.sbin/named/../../lib/bind -U__DATE__ -c /usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c
<command line>:12:1: warning: undefining "__DATE__"
/usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c: In function `query_find':
/usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c:2582: error: `dboptions' undeclared (first use in this function)
/usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c:2582: error: (Each undeclared identifier is reported only once
/usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c:2582: error: for each function it appears in.)
/usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c:2589: error: `tmprdataset' undeclared (first use in this function)


先感謝各位前輩撥空回覆

--
大地 陽光 狗大便

--
Tags: BBS

All Comments

新增磁碟分割

Andrew avatar
By Andrew
at 2010-01-06T19:12
補充一下訊息 Disk: ad6 Partition name: ad6s1 Free: 0 blocks (0MB) Disk: ad6 Partition name: ad6s2 Free: 0 blocks (0MB) andlt;-原為250GB Part ...

12/17 的php5 弱點

Tracy avatar
By Tracy
at 2010-01-06T18:24
※ 引述《dppman (*^o^*)》之銘言: : 今天再度在FreeBSD 8.0-STABLE(INTEL 5570 amd64 mode)下測試, : php 5.2.12只要不編成apache module : 把recode.so mark起來,執行php -v 或php -m都不會有問題 : 可 ...

12/17 的php5 弱點

Agnes avatar
By Agnes
at 2010-01-06T17:42
今天再度在FreeBSD 8.0-STABLE(INTEL 5570 amd64 mode)下測試, php 5.2.12只要不編成apache module 把recode.so mark起來,執行php -v 或php -m都不會有問題 可以分享一下您的extension.ini檔嗎? Thanks ...

FreeBSD i386 裝X11

Damian avatar
By Damian
at 2010-01-06T17:23
剛學FreeBSD,有很多東西不懂 目前要裝X11 可是我灌FreeBSD的USB只有2G 請問一下板上的高手有沒有方法呢? 謝謝 (我是用pkg_add ftp://......裝xorg和kde-lite) - ...

12/17 的php5 弱點

Enid avatar
By Enid
at 2010-01-06T06:42
這兩天測試升上 php-5.2.12 + apache-worker-2.2.14_5, 確定在 i386 的 FreeBSD 7.2-STABLE 可以 work, 跟以往的慣例一樣, 如果 php5-ext 有勾到 php5-recode 的話, /usr/local/etc/php/extensions ...