Subject: | |
From: | |
Reply To: | |
Date: | Mon, 17 Sep 2012 09:22:36 -0500 |
Content-Type: | text/plain |
Parts/Attachments: |
|
|
Synopsis: Important: bind97 security update
Issue Date: 2012-09-14
CVE Numbers: CVE-2012-4244
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.
A flaw was found in the way BIND handled resource records with a large
RDATA value. A malicious owner of a DNS domain could use this flaw to
create specially-crafted DNS resource records, that would cause a recursive
resolver or secondary server to exit unexpectedly with an assertion
failure. (CVE-2012-4244)
Users of bind97 are advised to upgrade to these updated packages, which
correct this issue. After installing the update, the BIND daemon (named)
will be restarted automatically.
SL5
x86_64
bind97-9.7.0-10.P2.el5_8.3.x86_64.rpm
bind97-chroot-9.7.0-10.P2.el5_8.3.x86_64.rpm
bind97-devel-9.7.0-10.P2.el5_8.3.i386.rpm
bind97-devel-9.7.0-10.P2.el5_8.3.x86_64.rpm
bind97-libs-9.7.0-10.P2.el5_8.3.i386.rpm
bind97-libs-9.7.0-10.P2.el5_8.3.x86_64.rpm
bind97-utils-9.7.0-10.P2.el5_8.3.x86_64.rpm
i386
bind97-9.7.0-10.P2.el5_8.3.i386.rpm
bind97-chroot-9.7.0-10.P2.el5_8.3.i386.rpm
bind97-devel-9.7.0-10.P2.el5_8.3.i386.rpm
bind97-libs-9.7.0-10.P2.el5_8.3.i386.rpm
bind97-utils-9.7.0-10.P2.el5_8.3.i386.rpm
- Scientific Linux Development Team
|
|
|