Scientific Linux alert SL-bind-20120917 (bind97)

From:
    	     
 
Pat Riehecky <riehecky@fnal.gov> 
To:
    	     
 
"SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV"
	<SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV> 
Subject:
    	     
 
Security ERRATA Important: bind97 on SL5.x i386/x86_64 
Date:
    	     
 
Mon, 17 Sep 2012 09:22:36 -0500
Message-ID:
    	     
 
<5057322C.5050601@fnal.gov>
Archive-link:
    	     
 
Article, Thread
              
Synopsis:          Important: bind97 security update
Issue Date:        2012-09-14
CVE Numbers:       CVE-2012-4244

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

A flaw was found in the way BIND handled resource records with a large
RDATA value. A malicious owner of a DNS domain could use this flaw to
create specially-crafted DNS resource records, that would cause a recursive
resolver or secondary server to exit unexpectedly with an assertion
failure. (CVE-2012-4244)

Users of bind97 are advised to upgrade to these updated packages, which
correct this issue. After installing the update, the BIND daemon (named)
will be restarted automatically.

SL5
   x86_64
     bind97-9.7.0-10.P2.el5_8.3.x86_64.rpm
     bind97-chroot-9.7.0-10.P2.el5_8.3.x86_64.rpm
     bind97-devel-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-devel-9.7.0-10.P2.el5_8.3.x86_64.rpm
     bind97-libs-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-libs-9.7.0-10.P2.el5_8.3.x86_64.rpm
     bind97-utils-9.7.0-10.P2.el5_8.3.x86_64.rpm
   i386
     bind97-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-chroot-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-devel-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-libs-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-utils-9.7.0-10.P2.el5_8.3.i386.rpm

- Scientific Linux Development Team