Scientific Linux: Major BIND Update for SL6.x Critical DNS Issue

Date:         Mon, 17 Sep 2012 08:35:53 -0500
Reply-To:     Pat Riehecky 
Sender:       Security Errata for Scientific Linux
              
From:         Pat Riehecky 
Organization: Fermilab
Subject:      Security ERRATA Important: bind on SL6.x i386/x86_64
MIME-Version: 1.0

Synopsis:          Important: bind security update
Issue Date:        2012-09-14
CVE Numbers:       CVE-2012-4244

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

A flaw was found in the way BIND handled resource records with a large
RDATA value. A malicious owner of a DNS domain could use this flaw to
create specially-crafted DNS resource records, that would cause a recursive
resolver or secondary server to exit unexpectedly with an assertion
failure. (CVE-2012-4244)

Users of bind are advised to upgrade to these updated packages, which
correct this issue. After installing the update, the BIND daemon (named)
will be restarted automatically.

SL6
   x86_64
     bind-libs-9.8.2-0.10.rc1.el6_3.3.i686.rpm
     bind-libs-9.8.2-0.10.rc1.el6_3.3.x86_64.rpm
     bind-utils-9.8.2-0.10.rc1.el6_3.3.x86_64.rpm
     bind-9.8.2-0.10.rc1.el6_3.3.x86_64.rpm
     bind-chroot-9.8.2-0.10.rc1.el6_3.3.x86_64.rpm
     bind-devel-9.8.2-0.10.rc1.el6_3.3.i686.rpm
     bind-devel-9.8.2-0.10.rc1.el6_3.3.x86_64.rpm
     bind-sdb-9.8.2-0.10.rc1.el6_3.3.x86_64.rpm
   i386
     bind-libs-9.8.2-0.10.rc1.el6_3.3.i686.rpm
     bind-utils-9.8.2-0.10.rc1.el6_3.3.i686.rpm
     bind-9.8.2-0.10.rc1.el6_3.3.i686.rpm
     bind-chroot-9.8.2-0.10.rc1.el6_3.3.i686.rpm
     bind-devel-9.8.2-0.10.rc1.el6_3.3.i686.rpm
     bind-sdb-9.8.2-0.10.rc1.el6_3.3.i686.rpm

- Scientific Linux Development Team