Synopsis: Important: bind security and bug fix update CVE Names: CVE-2009-0696 CVE-2009-0696 bind: DoS (assertion failure) via nsupdate packets A flaw was found in the way BIND handles dynamic update message packets containing the "ANY" record type. A remote attacker could use this flaw to send a specially-crafted dynamic update packet that could cause named to exit with an assertion failure. (CVE-2009-0696) Note: even if named is not configured for dynamic updates, receiving such a specially-crafted dynamic update packet could still cause named to exit unexpectedly. This update also fixes the following bug: * the following message could have been logged: "internal_accept: fcntl() failed: Too many open files". With these updated packages, timeout queries are aborted in order to reduce the number of open UDP sockets, and when the accept() function returns an EMFILE error value, that situation is now handled gracefully, thus resolving the issue. (BZ#498164) After installing the update, the BIND daemon (named) will be restarted automatically. SRPM: bind-9.2.4-25.el3.src.rpm i386: bind-9.2.4-25.el3.i386.rpm bind-chroot-9.2.4-25.el3.i386.rpm bind-devel-9.2.4-25.el3.i386.rpm bind-libs-9.2.4-25.el3.i386.rpm bind-utils-9.2.4-25.el3.i386.rpm x86_64: bind-9.2.4-25.el3.x86_64.rpm bind-chroot-9.2.4-25.el3.x86_64.rpm bind-devel-9.2.4-25.el3.x86_64.rpm bind-libs-9.2.4-25.el3.x86_64.rpm bind-utils-9.2.4-25.el3.x86_64.rpm -Connie Sieh -Troy Dawson