SA-FreeBSD bind9 漏洞 - BBS

Ophelia avatar
By Ophelia
at 2010-01-08T12:57

Table of Contents

※ 引述《osuer (歐蘇爾)》之銘言:
: 我有機器是6.4-STABLE
: 1/6 SA 說BIND 有漏洞
: 我想要使用patch 的方式修補漏洞
: 但是我pkg_info | grep name 或pkg_info |grep bind
: 都沒有看到類似bind 的套件
: 但我確定我的dns 服務是正常的 -,-
: 有前輩可以告訴我, 是否6.4 預設就有bind 服務, 不需另外安裝bind9 套件
: 若是的話, 那是否這bind9 漏洞不需更新
: 因為這台機器跑好久了, 當初dns services 建置時, 也忘了當初有另外裝bind 是否 XD
: 我會po文是因為
: 我在上patch 時............在SA 提到步驟
: 1# cd /usr/src
: 2# patch < /path/to/patch
: 3# cd /usr/src/lib/bind
: 4# make obj && make depend && make && make install
: 5# cd /usr/src/usr.sbin/named
: 6# make obj && make depend && make && make install
: 7# /etc/rc.d/named restart
: 而我在執行 步驟6 時, 在make 時出現以下錯誤, 我才回過頭去檢查 XD
: cc -O2 -fno-strict-aliasing -pipe -DVERSION='"9.3.6-P1"' -DHAVE_CONFIG_H -DWANT_IPV6 -DOPENSSL -DUSE_MD5 -DNS_LOCALSTATEDIR='"/var"' -DNS_SYSCONFDIR='"/etc/namedb"' -DNAMED_CONFFILE='"/etc/namedb/named.conf"' -DRNDC_CONFFILE='"/etc/namedb/rndc.conf"' -DRNDC_KEYFILE='"/etc/namedb/rndc.key"' -I/usr/src/usr.sbin/named/../../lib/bind -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/bind9/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/dns/include/dst
: -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/dns/include -I/usr/src/usr.sbin/named/../../lib/bind/dns -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/isccc/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/isccfg/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/isc/unix/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/isc/nothreads/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/isc/include -I/usr/src/usr.sbin/named/../../lib/bind/isc
: -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/lwres/unix/include -I/usr/src/usr.sbin/named/../../contrib/bind9/lib/lwres/include -I/usr/src/usr.sbin/named/../../lib/bind/lwres -I/usr/src/usr.sbin/named/../../contrib/bind9/bin/named/unix/include -I/usr/src/usr.sbin/named/../../contrib/bind9/bin/named/include -I/usr/src/usr.sbin/named/../../lib/bind -U__DATE__ -c /usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c
: <command line>:12:1: warning: undefining "__DATE__"
: /usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c: In function `query_find':
: /usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c:2582: error: `dboptions' undeclared (first use in this function)
: /usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c:2582: error: (Each undeclared identifier is reported only once
: /usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c:2582: error: for each function it appears in.)
: /usr/src/usr.sbin/named/../../contrib/bind9/bin/named/query.c:2589: error: `tmprdataset' undeclared (first use in this function)


你可以試試底下這個方面,我也有相同問題,用下列方式解決了:
# cd /usr/src && make update
# cd /usr/src/lib/bind && make obj && make depend && make && make install
# cd /usr/src/usr.sbin/named && make obj && make depend && make && make install
# /etc/rc.d/named restart

--
Tags: BBS

All Comments

SA-FreeBSD bind9 漏洞

Zora avatar
By Zora
at 2010-01-08T08:50
※ 引述《chiouss (Heart-shaped chant)》之銘言: : ※ 引述《osuer (歐蘇爾)》之銘言: : : 有前輩可以告訴我, 是否6.4 預設就有bind 服務, 不需另外安裝bind9 套件 : 是 : : 若是的話, 那是否這bind9 漏洞不需更新 : 當然不是,如果是 pa ...

關於zpool的問題

Michael avatar
By Michael
at 2010-01-08T01:00
小弟在試功能的時候,將 /dev/ad4s1 加入了之前就在用的 zpool NAME STATE READ WRITE CKSUM z ONLINE 0 0 0 ad4s3 O ...

SA-FreeBSD bind9 漏洞

Hedy avatar
By Hedy
at 2010-01-07T18:52
※ 引述《osuer (歐蘇爾)》之銘言: : 有前輩可以告訴我, 是否6.4 預設就有bind 服務, 不需另外安裝bind9 套件 是 : 若是的話, 那是否這bind9 漏洞不需更新 當然不是,如果是 package/ports 的 bind 9 有漏洞,那就是 portupgrade/portm ...

SA-FreeBSD bind9 漏洞

Lucy avatar
By Lucy
at 2010-01-07T09:11
我有機器是6.4-STABLE 1/6 SA 說BIND 有漏洞 我想要使用patch 的方式修補漏洞 但是我pkg_info | grep name 或pkg_info |grep bind 都沒有看到類似bind 的套件 但我確定我的dns 服務是正常的 -,- 有前輩可以告訴我, 是否6.4 ...

新增磁碟分割

Andrew avatar
By Andrew
at 2010-01-06T19:12
補充一下訊息 Disk: ad6 Partition name: ad6s1 Free: 0 blocks (0MB) Disk: ad6 Partition name: ad6s2 Free: 0 blocks (0MB) andlt;-原為250GB Part ...