RHBA-2008:0708 - Bug Fix Advisory

Topic

Updated bind packages that fix a bug and add enhancements are now
available.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named), which
resolves hostnames to IP addresses; a resolver library (routines for
applications to use when interfacing with DNS); and tools for verifying
that the DNS server is operating correctly.

The named init script returned incorrect error codes. This may have caused
the status command to return an incorrect status. In these updated
packages, the named init script is Linux Standard Base (LSB) compliant,
which resolves this issue.

As well, these updated packages add the following enhancements:

• when a query was performed that was not permitted in "named.conf", a

query log message such as the following occurred:

client [IP-address:port-number]: query '[zone]/[record]' denied

The hostname that was queried for did not appear in the log. In these
updated packages, when query logging is enabled ("rndc querylog"), log
messages contain the hostname that was queried for.

• the address of "L.ROOT-SERVERS.NET." has been updated.
• two new rndc commands, "rndc freeze [zone name]" and "rndc thaw [zone

name]", have been added. Normally, dynamic zones can not be edited
manually, as they may not contain the latest zone information; however,
the "rndc freeze [zone name]" command allows users to suspend dynamic
updates, allowing zone files to be edited manually. Running the "rndc
thaw [zone name]" command unfreezes the zone, reloads the zone with the
changes specified, and allows dynamic updates to continue.

Users of bind are advised to upgrade to these updated packages, which
resolve this issue and add these enhancements.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 241745 - named query denied syslog messages lack information
• BZ - 242735 - Wrong init script
• BZ - 363541 - New L.ROOT-SERVERS.NET address

CVEs

(none)

References

(none)