Security Advisory for Bind97 on Scientific Linux 5: Key Updates Required

Date:         Mon, 17 Sep 2012 09:22:36 -0500
Reply-To:     Pat Riehecky 
Sender:       Security Errata for Scientific Linux
              
From:         Pat Riehecky 
Organization: Fermilab
Subject:      Security ERRATA Important: bind97 on SL5.x i386/x86_64
MIME-Version: 1.0

Synopsis:          Important: bind97 security update
Issue Date:        2012-09-14
CVE Numbers:       CVE-2012-4244

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

A flaw was found in the way BIND handled resource records with a large
RDATA value. A malicious owner of a DNS domain could use this flaw to
create specially-crafted DNS resource records, that would cause a recursive
resolver or secondary server to exit unexpectedly with an assertion
failure. (CVE-2012-4244)

Users of bind97 are advised to upgrade to these updated packages, which
correct this issue. After installing the update, the BIND daemon (named)
will be restarted automatically.

SL5
   x86_64
     bind97-9.7.0-10.P2.el5_8.3.x86_64.rpm
     bind97-chroot-9.7.0-10.P2.el5_8.3.x86_64.rpm
     bind97-devel-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-devel-9.7.0-10.P2.el5_8.3.x86_64.rpm
     bind97-libs-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-libs-9.7.0-10.P2.el5_8.3.x86_64.rpm
     bind97-utils-9.7.0-10.P2.el5_8.3.x86_64.rpm
   i386
     bind97-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-chroot-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-devel-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-libs-9.7.0-10.P2.el5_8.3.i386.rpm
     bind97-utils-9.7.0-10.P2.el5_8.3.i386.rpm

- Scientific Linux Development Team