RHBA-2006:0288 - Bug Fix Advisory

Topic

Updated bind packages that fix several bugs are now available.

Description

BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. The bind package provides a DNS server
(named), which resolves host names to IP addresses, and tools for
control and verification of the DNS server. The bind-libs package
provides the libraries used by the DNS server and bind-utils. The
bind-utils package provides DNS lookup utilities: host(1), dig(1),
and nslookup. The bind-devel package provides header files for
development with the BIND libraries. A default set of DNS server
configuration files is provided by the caching-nameserver package.

This update delivers backports from ISC BIND 9.2.6 to apply these fixes:

• If a lookup for another name server's addresses returned addresses

that were unreachable via local routers, lookups for names in domains
for which that server is authoritative could experience a four second
delay per name not in the cache. No delay is now incurred for addresses
served by servers with unreachable addresses.

• Fixes to named's thread locking logic: This feature in ISC BIND 9.3.0+

was backported and delivered in this update.

• edns-udp-size: Users can now set the maximum size of UDP packets used

for EDNS0 (RFC 2671), to get past routers / firewalls that enforce a
maximum UDP packet size.

Miscellaneous bug fixes, including improved support for custom named.conf
locations, are also delivered in this update.

All BIND users are advised to upgrade to the updated bind packages.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 167631 - critical issues with BIND 9.2.4 now fixed with ISC BIND 9.2.5 require backport
• BZ - 169416 - /etc/init.d/named insists on /etc/named.conf, although this can be changed
• BZ - 170360 - bind-chroot directory permissions allow inappropriate write access for the named user.
• BZ - 173961 - Bind crashes with pthread_mutex_destroy failed
• BZ - 174127 - critical upstream bug fixes need backporting
• BZ - 178300 - bind-chroot does not update /etc/sysconfig/named during %post

CVEs

• CVE-2006-4096

References

(none)