RHBA-2010:0075 - Bug Fix Advisory

Topic

Updated bind packages that resolve several issues are now available for Red
Hat Enterprise Linux 4.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

These updated bind packages provide fixes for the following bugs:

• under certain conditions, the named name server daemon could exit due to

an assertion failure. The following message was logged to
/var/log/messages:

named: socket.c:1649: INSIST(!sock->pending_recv) failed named: exiting
(due to assertion failure)

This update provides a fix to the socket module which prevents this
assertion from failing, thus resolving the problem. (BZ#552534)

• rndc is a command line utility that allows the named daemon to be

administered locally or remotely. The named init script did not wait for
proper named termination before attempting to restart named, which, when
the name server was under moderate or high load, could have caused a
failure to start. With this update, the named init script waits for named
termination before attempting to restart the name server. (BZ#552576)

• under heavy load, the named name server could have failed to respond to a

TCP query. If recursive queries consumed all available UDP sockets, then
the opening of a TCP socket could have failed due to a default limit placed
upon the number of open file descriptors. This default limit has been
removed entirely from these updated packages, which both prevents the
possibility of named failing to respond to a TCP query, and corresponds to
the existing documentation. (BZ#552577)

• named exited due to an assertion failure when the it received a command

via rdnc telling it to reload a subdomain of its authoritative domain. With
this update, when named receives such a command via rdnc, it simply logs an
error message to the system log and ignores the command. (BZ#552578)

All users of bind are advised to upgrade to these updated packages, which
resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8 ia64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.8 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.8 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.8 ppc

Fixes

• BZ - 552534 - named service crashes with an assertion failed message
• BZ - 552576 - named init script doesn't wait for server terminaton
• BZ - 552577 - named TCP connections hang
• BZ - 552578 - named crashes on incorrect usage of rndc reload command

CVEs

(none)

References

(none)