Re: [cobalt-security] RaQ3 - OS Update 5.0 + BIND 8.3.3-2

[Michael Stauber <cobalt@xxxxxxxxxxxxxx>]

Hi Barbara,

> I was wondering if anyone with the Solarspeed BIND/DNS
> update (8.3.3-2) has installed the latest SUN OS
> Update 5.0 -and if there were any problems?  I really
> like having the updated version of BIND on my system
> given the recent vulnerabilities -but I'm wondering if
> I should uninstall it in order to install the OS
> Update 5, or if I can leave it alone..

OS Update 5.0 for the RaQ3 contains bind-8.2.3-C4.i386.rpm
bind-utils-8.2.3-C4.i386.rpm

However, it does not contain the init script for bind (/etc/rc.d/init.d/named) 
or the links in the respective runlevel directories (/etc/rc.d/rc3.d/). 

If you uninstall the Solarspeed bind-8.3.3-2, then your bind will be missing 
the init script and will therefore not start.

So the suggested approach is this:

Leave the bind-8.3.3-2 aboard. Then install OS Update 5 and once that is done 
you install bind-8.3.4 from Solarspeed. That worked for me on a few RaQ3's 
when I applied OS Update 5.0.

If you want to be really on the safe side, you could choose this approach:

1.) Uninstall the Solarspeed bind-8.3.3-2 by running the uninstaller located 
somewhere in /var/lib/cobalt/uninstaller/

2.) Reinstall the original Sun Cobalt bind for the RaQ3:

rpm -hUv ftp://ftp.cobalt.com/pub/products/raq3/RPMS/bind-8.2.3-C1.i386.rpm
rpm -hUv 
ftp://ftp.cobalt.com/pub/products/raq3/RPMS/bind-devel-8.2.3-C1.i386.rpm
rpm -hUv 
ftp://ftp.cobalt.com/pub/products/raq3/RPMS/bind-utils-8.2.3-C1.i386.rpm

(You should not run this bind for a longer period of time, as it is pretty old 
and missing a few backported patches which were included in later PKGs and/or 
OS Updates)

3.) Apply OS Update 5.0

4.) (Optional) Install Solarspeed's Bind-8.3.4

-- 

With best regards,

Michael Stauber
mstauber@xxxxxxxxxxxxxx
Unix/Linux Support Engineer