-------- Forwarded Message -------- From: Paul W. Frields <stickster@xxxxxxxxx> Reply-to: fedora-list@xxxxxxxxxx To: devel-announce@xxxxxxxxxxxxxxxxxxxxxxx, users <users@xxxxxxxxxxxxxxxxxxxxxxx>, Fedora Announcements <announce@xxxxxxxxxxxxxxxxxxxxxxx> Subject: Notice: dnssec-conf updates in Fedora 11 and 12 Date: Tue, 9 Feb 2010 17:29:27 -0500 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Fedora Project recently issued an update to the dnssec-conf package, to fix an issue that caused Fedora 11 and 12 systems using BIND (named) to put an inordinately heavy load on RIPE nameservers. However, this update has been found to break some BIND configurations as seen in this bug: https://bugzilla.redhat.com/show_bug.cgi?id=563232 The problem occurs in these packages: dnssec-conf-1.21-3.fc11 dnssec-conf-1.21-7.fc12 To determine if your system is affected, run the following command: rpm -q dnssec-conf If one of the above package descriptors does not appear, your system is not affected and you may safely ignore this message. If you are affected, please continue reading. == Workaround == If you have already accepted this update, you can downgrade the package and start the failed BIND (named) daemon again using these commands: su -c 'yum downgrade dnssec-conf' su -c 'service named start' == Solution == System owners running BIND name servers on Fedora 11 or 12 systems are advised not to accept the specific dnssec-conf pacakge updates listed above. There are several ways to avoid these specific updates. * If you use the PackageKit graphical client, or another graphical client, deselect the dnssec-conf update in the dialog that lists package updates. * If you use the yum command-line client, use this command to exclude dnssec-conf from the list of packages to be updated: su -c 'yum --exclude=dnssec-conf update' == Remediation == A new update is being prepared to address this problem for Fedora 11 and 12 users, and will be pushed to our mirrors as soon as possible. Users who are not running BIND nameservers (named) on their Fedora 11 and 12 can safely disregard this notice. When the new updates are pushed, a follow-up announcement will be made here. At that time, affected system owners can safely accept the replacement updates. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iD8DBQFLceHHrNvJN70RNxcRAoY1AKDGuYgvJvoRi6sYpBsl3vbYyiMy2QCg3Beh KNbq55w4R2A4qtLCwQosJPg= =zRrs -----END PGP SIGNATURE----- -- ======================================================================= "I may be synthetic, but I'm not stupid" -- the artificial person, from _Aliens_ ======================================================================= Aaron Konstam telephone: (210) 656-0355 e-mail: akonstam@xxxxxxxxxxxxx -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
