Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

openSUSE: 2012:1192-1 Critical Update for BIND Remote DoS

opensuse
Calendar Grey September 17, 2012
Dist Opensuse Esm H88
Important openSUSE upgrade for BIND resolves a remote vulnerability that could lead to service interruption, thereby improving overall system protection.
An update that fixes one vulnerability is now available.

Description

A remote denial of service attack was fixed in the BIND DNS

nameserver, which could be caused by attackers providing a

specifically prepared zone file for recursive transfer.

(CVE-2012-4244)

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 12.2:

zypper in -t patch openSUSE-2012-615

- openSUSE 12.1:

zypper in -t patch openSUSE-2012-615

- openSUSE 11.4:

zypper in -t patch openSUSE-2012-615

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 12.2 (i586 x86_64):

bind-9.9.1P3-1.4.1

bind-chrootenv-9.9.1P3-1.4.1

bind-debuginfo-9.9.1P3-1.4.1

bind-debugsource-9.9.1P3-1.4.1

bind-devel-9.9.1P3-1.4.1

bind-libs-9.9.1P3-1.4.1

bind-libs-debuginfo-9.9.1P3-1.4.1

bind-lwresd-9.9.1P3-1.4.1

bind-lwresd-debuginfo-9.9.1P3-1.4.1

bind-utils-9.9.1P3-1.4.1

bind-utils-debuginfo-9.9.1P3-1.4.1

- openSUSE 12.2 (x86_64):

bind-libs-32bit-9.9.1P3-1.4.1

bind-libs-debuginfo-32bit-9.9.1P3-1.4.1

- openSUSE 12.2 (noarch):

bind-doc-9.9.1P3-1.4.1

- openSUSE 12.1 (i586 x86_64):

bind-9.8.3P3-4.20.1

bind-chrootenv-9.8.3P3-4.20.1

bind-debuginfo-9.8.3P3-4.20.1

bind-debugsource-9.8.3P3-4.20.1

bind-devel-9.8.3P3-4.20.1

bind-libs-9.8.3P3-4.20.1

bind-libs-debuginfo-9.8.3P3-4.20.1

bind-lwresd-9.8.3P3-4.20.1

bind-lwresd-debuginfo-9.8.3P3-4.20.1

bind-utils-9.8.3P3-4.20.1

bind-utils-debuginfo-9.8.3P3-4.20.1

- openSUSE 12.1 (x86_64):

bind-libs-32bit-9.8.3P3-4.20.1

bind-libs-debuginfo-32bit-9.8.3P3-4.20.1

- openSUSE 12.1 (noarch):

bind-doc-9.8.3P3-4.20.1

- openSUSE 12.1 (ia64):

bind-libs-debuginfo...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2012-4244.html

--

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2012:1192-1
Rating: critical
Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here