Technical Update: SLSA-2016:0074-1 Medium: bind97 Service Disruption

Date: Wed, 27 Jan 2016 16:30:42 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: bind97 on SL5.x i386/x86_64
MIME-Version: 1.0
Message-ID: <20160127163042.4610.3304@slpackages.fnal.gov>

Synopsis: Moderate: bind97 security update
Advisory ID: SLSA-2016:0074-1
Issue Date: 2016-01-27
CVE Numbers: CVE-2015-8704
--

A denial of service flaw was found in the way BIND processed certain
malformed Address Prefix List (APL) records. A remote, authenticated
attacker could use this flaw to cause named to crash. (CVE-2015-8704)

After installing the update, the BIND daemon (named) will be restarted
automatically.
--

SL5
 x86_64
 bind97-9.7.0-21.P2.el5_11.5.x86_64.rpm
 bind97-chroot-9.7.0-21.P2.el5_11.5.x86_64.rpm
 bind97-debuginfo-9.7.0-21.P2.el5_11.5.i386.rpm
 bind97-debuginfo-9.7.0-21.P2.el5_11.5.x86_64.rpm
 bind97-devel-9.7.0-21.P2.el5_11.5.i386.rpm
 bind97-devel-9.7.0-21.P2.el5_11.5.x86_64.rpm
 bind97-libs-9.7.0-21.P2.el5_11.5.i386.rpm
 bind97-libs-9.7.0-21.P2.el5_11.5.x86_64.rpm
 bind97-utils-9.7.0-21.P2.el5_11.5.x86_64.rpm
 i386
 bind97-9.7.0-21.P2.el5_11.5.i386.rpm
 bind97-chroot-9.7.0-21.P2.el5_11.5.i386.rpm
 bind97-debuginfo-9.7.0-21.P2.el5_11.5.i386.rpm
 bind97-devel-9.7.0-21.P2.el5_11.5.i386.rpm
 bind97-libs-9.7.0-21.P2.el5_11.5.i386.rpm
 bind97-utils-9.7.0-21.P2.el5_11.5.i386.rpm

- Scientific Linux Development Team