Subject: | |
From: | |
Reply To: | |
Date: | Thu, 30 Jul 2009 15:09:30 -0500 |
Content-Type: | TEXT/PLAIN |
Parts/Attachments: |
|
|
Synopsis: Important: bind security and bug fix update
CVE Names: CVE-2009-0696
CVE-2009-0696 bind: DoS (assertion failure) via nsupdate packets
A flaw was found in the way BIND handles dynamic update message packets
containing the "ANY" record type. A remote attacker could use this flaw to
send a specially-crafted dynamic update packet that could cause named to
exit with an assertion failure. (CVE-2009-0696)
Note: even if named is not configured for dynamic updates, receiving such
a specially-crafted dynamic update packet could still cause named to exit
unexpectedly.
This update also fixes the following bug:
* the following message could have been logged: "internal_accept: fcntl()
failed: Too many open files". With these updated packages, timeout queries
are aborted in order to reduce the number of open UDP sockets, and when the
accept() function returns an EMFILE error value, that situation is now
handled gracefully, thus resolving the issue. (BZ#498164)
After installing the update, the BIND daemon (named) will be restarted
automatically.
SRPM:
bind-9.2.4-25.el3.src.rpm
i386:
bind-9.2.4-25.el3.i386.rpm
bind-chroot-9.2.4-25.el3.i386.rpm
bind-devel-9.2.4-25.el3.i386.rpm
bind-libs-9.2.4-25.el3.i386.rpm
bind-utils-9.2.4-25.el3.i386.rpm
x86_64:
bind-9.2.4-25.el3.x86_64.rpm
bind-chroot-9.2.4-25.el3.x86_64.rpm
bind-devel-9.2.4-25.el3.x86_64.rpm
bind-libs-9.2.4-25.el3.x86_64.rpm
bind-utils-9.2.4-25.el3.x86_64.rpm
-Connie Sieh
-Troy Dawson
|
|
|