Re: Named 9.3.3 triggers stack smashing attack

On 12/28/06, Max Whitt <[email protected]> wrote:
>
> I just upgraded to Named 9.3.3 via SWUP on two servers and now neither of
> them will start. I get this in the logs:
>
> Dec 28 23:12:34 home named[5114]: command channel listening on
> 127.0.0.1#953
> Dec 28 23:12:34 home named[5114]: command channel listening on ::1#953
> Dec 28 23:12:35 home named: named startup succeeded
> Dec 28 23:12:43 home named: stack smashing attack in function query_find


In response to my own problem, I went and found a copy of BIND 9.3.2 (that's
the latest announced version I can find on TSL-Announce, but 9.3.3 was
definitely in the RDF files). I'm not sure the right way to do this, but I
used swup --remove bind-libs, which automatically removed the three bind
packages I was using (bind, bind-utils, bind-libs). I then added bind as an
exclude package on the swup configuration, and manually installed the three
packages using rpm -i.

Not sure if there's a more elegant way I should have done this, but it
worked for me and both my DNS services are now back up and running. Hope
this helps if anyone else has this problem.

Max