SUSE alert SUSE-SU-2012:1333-1 (bind)

From:
    	     
 
opensuse-security@opensuse.org 
To:
    	     
 
opensuse-security-announce@opensuse.org 
Subject:
    	     
 
[security-announce] SUSE-SU-2012:1333-1: critical: Security update for bind 
Date:
    	     
 
Sat, 13 Oct 2012 06:09:20 +0200 (CEST)
Message-ID:
    	     
 
<20121013040920.B7DEA32271@maintenance.suse.de>
Archive-link:
    	     
 
Article, Thread
              
   SUSE Security Update: Security update for bind
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:1333-1
Rating:             critical
References:         #780157 
Cross-References:   CVE-2012-4244
Affected Products:
                    SUSE Linux Enterprise Server 10 SP3 LTSS
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:


   This update fixes a bug where specially-crafted RRs could
   have caused a  Denial of Service (Application crash) in
   named. CVE-2012-4244 was assigned  to this issue.

   Security Issue reference:

   * CVE-2012-4244
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4244
   >



Package List:

   - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64):

      bind-9.3.4-1.40.1
      bind-chrootenv-9.3.4-1.40.1
      bind-devel-9.3.4-1.40.1
      bind-doc-9.3.4-1.40.1
      bind-libs-9.3.4-1.40.1
      bind-utils-9.3.4-1.40.1

   - SUSE Linux Enterprise Server 10 SP3 LTSS (s390x x86_64):

      bind-libs-32bit-9.3.4-1.40.1


References:

   http://support.novell.com/security/cve/CVE-2012-4244.html
   https://bugzilla.novell.com/780157
   http://download.novell.com/patch/finder/?keywords=5798d03...

-- 
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org