Package name perl-Net-DNS
Date March 20th, 2008
Advisory ID MDVSA-2008:073
Affected versions CS3.0, 2007.0, CS4.0, 2007.1, 2008.0
Synopsis Updated perl-Net-DNS packages fix DoS vulnerability

Problem Description

A vulnerability in the Net::DNS perl module was found that could
allow remote attackers to cause a denial of service via a crafted
DNS response.

The updated packages have been patched to correct this issue.

Updated Packages

Corporate Server 3.0

 34228478b5f31c0a2c9beb80de8a004b  corporate/3.0/i586/perl-Net-DNS-0.39-2.2.C30mdk.i586.rpm 
 8846ab7ae3ecf66ee93666e4551e091b  corporate/3.0/SRPMS/perl-Net-DNS-0.39-2.2.C30mdk.src.rpm

Corporate Server 3.0/X86_64

 9d62397d900754063b46a1f6a7dcae9c  corporate/3.0/x86_64/perl-Net-DNS-0.39-2.2.C30mdk.x86_64.rpm 
 8846ab7ae3ecf66ee93666e4551e091b  corporate/3.0/SRPMS/perl-Net-DNS-0.39-2.2.C30mdk.src.rpm

Mandriva Linux 2007

 1cf2397dcfe207d625bd24d1d7fc744a  2007.0/i586/perl-Net-DNS-0.58-1.2mdv2007.0.i586.rpm 
 434fdd9456118124117a26509c6d1674  2007.0/SRPMS/perl-Net-DNS-0.58-1.2mdv2007.0.src.rpm

Mandriva Linux 2007/X86_64

 374101d8c50675d8032c5695dfb0866f  2007.0/x86_64/perl-Net-DNS-0.58-1.2mdv2007.0.x86_64.rpm 
 434fdd9456118124117a26509c6d1674  2007.0/SRPMS/perl-Net-DNS-0.58-1.2mdv2007.0.src.rpm

Corporate Server 4.0

 57bb9572548a1727cdfde07176a55fc2  corporate/4.0/i586/perl-Net-DNS-0.52-1.2.20060mlcs4.i586.rpm 
 cd1731f072ad841c1244b6e873226422  corporate/4.0/SRPMS/perl-Net-DNS-0.52-1.2.20060mlcs4.src.rpm

Corporate Server 4.0/X86_64

 454f468cd925c1fccdf20751ac884dd9  corporate/4.0/x86_64/perl-Net-DNS-0.52-1.2.20060mlcs4.x86_64.rpm 
 cd1731f072ad841c1244b6e873226422  corporate/4.0/SRPMS/perl-Net-DNS-0.52-1.2.20060mlcs4.src.rpm

Mandriva Linux 2007.1

 8ff35127ae1c20c0b4e4cf3734b41d78  2007.1/i586/perl-Net-DNS-0.59-1.2mdv2007.1.i586.rpm 
 0630c817a581736750b3aa3a36330442  2007.1/SRPMS/perl-Net-DNS-0.59-1.2mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64

 2db71882e00490ed228d3544e73d5dfa  2007.1/x86_64/perl-Net-DNS-0.59-1.2mdv2007.1.x86_64.rpm 
 0630c817a581736750b3aa3a36330442  2007.1/SRPMS/perl-Net-DNS-0.59-1.2mdv2007.1.src.rpm

Mandriva Linux 2008.0

 46454d0d2ffbccc32875d38428f5dbb7  2008.0/i586/perl-Net-DNS-0.61-1.1mdv2008.0.i586.rpm 
 0dd436fba91470dbd4cc4a5371cfa909  2008.0/SRPMS/perl-Net-DNS-0.61-1.1mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64

 3724958b2631242743be3d24ed463e5f  2008.0/x86_64/perl-Net-DNS-0.61-1.1mdv2008.0.x86_64.rpm 
 0dd436fba91470dbd4cc4a5371cfa909  2008.0/SRPMS/perl-Net-DNS-0.61-1.1mdv2008.0.src.rpm

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6341

Upgrade

To upgrade automatically, use MandrivaUpdate.


Verification

Please verify the update prior to upgrading to ensure the integrity of the downloaded package. You can do this with the command :

                rpm --checksig package.rpm
                

You can get the GPG public key of the Mandriva Security Team to verify the GPG signature of each RPM.

If you use MandrivaUpdate, the verification of md5 checksum and GPG signature is performed automatically for you.