Synopsis

Moderate: bind security update

Type/Severity

Security Advisory: Moderate

Topic

Updated bind packages that fix a security issue and a bug are now available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

ISC BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols.

A flaw was found in the way BIND processed certain DNS query responses. On
servers that had enabled DNSSEC validation, this could allow an remote
attacker to cause a denial of service. (CVE-2007-0494)

For users of Red Hat Enterprise Linux 3, the previous BIND update caused an
incompatible change to the default configuration that resulted in rndc not
sharing the key with the named daemon. This update corrects this bug and
restores the behavior prior to that update.

Updating the bind package in Red Hat Enterprise Linux 3 could result in
nonfunctional configuration in case the bind-libs package was not updated.
This update corrects this bug by adding the correct dependency on bind-libs.

Users of BIND are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server 2 ia64
• Red Hat Enterprise Linux Server 2 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Workstation 2 ia64
• Red Hat Enterprise Linux Workstation 2 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 202012 - rndc.conf change breaks working bind config
• BZ - 225222 - CVE-2007-0494 BIND dnssec denial of service

CVEs

• CVE-2007-0494

References

• http://marc.theaimsgroup.com/?l=bind-announce&m=116968519300764
• http://www.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 4

SRPM
x86_64
bind-9.2.4-24.EL4.x86_64.rpm	SHA-256: c58397a10e4e20bd312522324b001eff5fbdde93f767f0f7479cfc1a4cb13ceb
bind-9.2.4-24.EL4.x86_64.rpm	SHA-256: c58397a10e4e20bd312522324b001eff5fbdde93f767f0f7479cfc1a4cb13ceb
bind-chroot-9.2.4-24.EL4.x86_64.rpm	SHA-256: 6f940b419148291eca3668c409943bdb32e8e95b952dc999388f0b60edcc9eb5
bind-chroot-9.2.4-24.EL4.x86_64.rpm	SHA-256: 6f940b419148291eca3668c409943bdb32e8e95b952dc999388f0b60edcc9eb5
bind-devel-9.2.4-24.EL4.x86_64.rpm	SHA-256: 9388692fd5544ec23b9f92ce54db6dadd4ca3dcecb73e97f052724efd1b18993
bind-devel-9.2.4-24.EL4.x86_64.rpm	SHA-256: 9388692fd5544ec23b9f92ce54db6dadd4ca3dcecb73e97f052724efd1b18993
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-libs-9.2.4-24.EL4.x86_64.rpm	SHA-256: a828d76b3dafe8ce3e5fa106d067744084ad6acf55d5cbd1ab9e3e0e849bbe18
bind-libs-9.2.4-24.EL4.x86_64.rpm	SHA-256: a828d76b3dafe8ce3e5fa106d067744084ad6acf55d5cbd1ab9e3e0e849bbe18
bind-utils-9.2.4-24.EL4.x86_64.rpm	SHA-256: b8dc887e10df0027872633b257c0f88357848fffb0ba021eeea5e3838f5ce427
bind-utils-9.2.4-24.EL4.x86_64.rpm	SHA-256: b8dc887e10df0027872633b257c0f88357848fffb0ba021eeea5e3838f5ce427
ia64
bind-9.2.4-24.EL4.ia64.rpm	SHA-256: 5edd2519f8241e22cdc58c715b1387f75afa1c1b181fe0bfcdf7c6ed30fd41e6
bind-9.2.4-24.EL4.ia64.rpm	SHA-256: 5edd2519f8241e22cdc58c715b1387f75afa1c1b181fe0bfcdf7c6ed30fd41e6
bind-chroot-9.2.4-24.EL4.ia64.rpm	SHA-256: 74e4b8fd92dad522500fdfc423ed4f3ebef4b65f892221a1181c899dafc97841
bind-chroot-9.2.4-24.EL4.ia64.rpm	SHA-256: 74e4b8fd92dad522500fdfc423ed4f3ebef4b65f892221a1181c899dafc97841
bind-devel-9.2.4-24.EL4.ia64.rpm	SHA-256: 4f29015007704710ff9ff4d3904746d1c58869319d7f5712065ea131eaa07b97
bind-devel-9.2.4-24.EL4.ia64.rpm	SHA-256: 4f29015007704710ff9ff4d3904746d1c58869319d7f5712065ea131eaa07b97
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-libs-9.2.4-24.EL4.ia64.rpm	SHA-256: 63c5e182232f151429208e666eedb6664a40885ab83ca7dc907236699f9664f6
bind-libs-9.2.4-24.EL4.ia64.rpm	SHA-256: 63c5e182232f151429208e666eedb6664a40885ab83ca7dc907236699f9664f6
bind-utils-9.2.4-24.EL4.ia64.rpm	SHA-256: 35b8fdc6ae67785e2b0caebcc90e354f61cf1235b8906aef95f67d8637f22694
bind-utils-9.2.4-24.EL4.ia64.rpm	SHA-256: 35b8fdc6ae67785e2b0caebcc90e354f61cf1235b8906aef95f67d8637f22694
i386
bind-9.2.4-24.EL4.i386.rpm	SHA-256: a2161864b97f0fe73605e5bbfc3e5609101d4d89fed9191f8cef2f08bcf7812e
bind-9.2.4-24.EL4.i386.rpm	SHA-256: a2161864b97f0fe73605e5bbfc3e5609101d4d89fed9191f8cef2f08bcf7812e
bind-chroot-9.2.4-24.EL4.i386.rpm	SHA-256: cb4204a8d5b84760437cf0581450ed4c4300f8812888f6d192b26bf15b2ce23b
bind-chroot-9.2.4-24.EL4.i386.rpm	SHA-256: cb4204a8d5b84760437cf0581450ed4c4300f8812888f6d192b26bf15b2ce23b
bind-devel-9.2.4-24.EL4.i386.rpm	SHA-256: e99f9ad3fd6e73a144e6d46612be74bfebb55b802540d32cd6eae7235c5c77fc
bind-devel-9.2.4-24.EL4.i386.rpm	SHA-256: e99f9ad3fd6e73a144e6d46612be74bfebb55b802540d32cd6eae7235c5c77fc
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-utils-9.2.4-24.EL4.i386.rpm	SHA-256: d5ed837d4d60e01965a645824007365ed2f19e10f3fe6d18f1197badc8a29a9d
bind-utils-9.2.4-24.EL4.i386.rpm	SHA-256: d5ed837d4d60e01965a645824007365ed2f19e10f3fe6d18f1197badc8a29a9d

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
bind-9.2.4-24.EL4.x86_64.rpm	SHA-256: c58397a10e4e20bd312522324b001eff5fbdde93f767f0f7479cfc1a4cb13ceb
bind-chroot-9.2.4-24.EL4.x86_64.rpm	SHA-256: 6f940b419148291eca3668c409943bdb32e8e95b952dc999388f0b60edcc9eb5
bind-devel-9.2.4-24.EL4.x86_64.rpm	SHA-256: 9388692fd5544ec23b9f92ce54db6dadd4ca3dcecb73e97f052724efd1b18993
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-libs-9.2.4-24.EL4.x86_64.rpm	SHA-256: a828d76b3dafe8ce3e5fa106d067744084ad6acf55d5cbd1ab9e3e0e849bbe18
bind-utils-9.2.4-24.EL4.x86_64.rpm	SHA-256: b8dc887e10df0027872633b257c0f88357848fffb0ba021eeea5e3838f5ce427
ia64
bind-9.2.4-24.EL4.ia64.rpm	SHA-256: 5edd2519f8241e22cdc58c715b1387f75afa1c1b181fe0bfcdf7c6ed30fd41e6
bind-chroot-9.2.4-24.EL4.ia64.rpm	SHA-256: 74e4b8fd92dad522500fdfc423ed4f3ebef4b65f892221a1181c899dafc97841
bind-devel-9.2.4-24.EL4.ia64.rpm	SHA-256: 4f29015007704710ff9ff4d3904746d1c58869319d7f5712065ea131eaa07b97
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-libs-9.2.4-24.EL4.ia64.rpm	SHA-256: 63c5e182232f151429208e666eedb6664a40885ab83ca7dc907236699f9664f6
bind-utils-9.2.4-24.EL4.ia64.rpm	SHA-256: 35b8fdc6ae67785e2b0caebcc90e354f61cf1235b8906aef95f67d8637f22694
i386
bind-9.2.4-24.EL4.i386.rpm	SHA-256: a2161864b97f0fe73605e5bbfc3e5609101d4d89fed9191f8cef2f08bcf7812e
bind-chroot-9.2.4-24.EL4.i386.rpm	SHA-256: cb4204a8d5b84760437cf0581450ed4c4300f8812888f6d192b26bf15b2ce23b
bind-devel-9.2.4-24.EL4.i386.rpm	SHA-256: e99f9ad3fd6e73a144e6d46612be74bfebb55b802540d32cd6eae7235c5c77fc
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-utils-9.2.4-24.EL4.i386.rpm	SHA-256: d5ed837d4d60e01965a645824007365ed2f19e10f3fe6d18f1197badc8a29a9d

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
bind-9.2.4-24.EL4.x86_64.rpm	SHA-256: c58397a10e4e20bd312522324b001eff5fbdde93f767f0f7479cfc1a4cb13ceb
bind-chroot-9.2.4-24.EL4.x86_64.rpm	SHA-256: 6f940b419148291eca3668c409943bdb32e8e95b952dc999388f0b60edcc9eb5
bind-devel-9.2.4-24.EL4.x86_64.rpm	SHA-256: 9388692fd5544ec23b9f92ce54db6dadd4ca3dcecb73e97f052724efd1b18993
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-libs-9.2.4-24.EL4.x86_64.rpm	SHA-256: a828d76b3dafe8ce3e5fa106d067744084ad6acf55d5cbd1ab9e3e0e849bbe18
bind-utils-9.2.4-24.EL4.x86_64.rpm	SHA-256: b8dc887e10df0027872633b257c0f88357848fffb0ba021eeea5e3838f5ce427
i386
bind-9.2.4-24.EL4.i386.rpm	SHA-256: a2161864b97f0fe73605e5bbfc3e5609101d4d89fed9191f8cef2f08bcf7812e
bind-chroot-9.2.4-24.EL4.i386.rpm	SHA-256: cb4204a8d5b84760437cf0581450ed4c4300f8812888f6d192b26bf15b2ce23b
bind-devel-9.2.4-24.EL4.i386.rpm	SHA-256: e99f9ad3fd6e73a144e6d46612be74bfebb55b802540d32cd6eae7235c5c77fc
bind-libs-9.2.4-24.EL4.i386.rpm	SHA-256: 91410867c048621e2805a7b1ffce1c4cc5c65f75176f0744f1ab5e8cb435971a
bind-utils-9.2.4-24.EL4.i386.rpm	SHA-256: d5ed837d4d60e01965a645824007365ed2f19e10f3fe6d18f1197badc8a29a9d

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
bind-9.2.4-24.EL4.s390x.rpm	SHA-256: 955a31215fa51071fedf1e207328d5b117d9fc5e7ed9cbc1065e3aad33663a75
bind-chroot-9.2.4-24.EL4.s390x.rpm	SHA-256: 81490dfdf8bb0af34b43c6eafd7efa2517e929ff11cea704926b76b8c9f1f4cb
bind-devel-9.2.4-24.EL4.s390x.rpm	SHA-256: 71f5ce44d927740a8086cded9289cbc56c04abe2bff1856a14e073f0791c8303
bind-libs-9.2.4-24.EL4.s390.rpm	SHA-256: ab0657a6d8455e5625efccc9739c1a3ab476f5bd7b0bc38b947c58319d474600
bind-libs-9.2.4-24.EL4.s390x.rpm	SHA-256: 50b5310f42c2b4aca0ecd6175ba9359a6d6e55ac947f051b94dd3612cc73a56a
bind-utils-9.2.4-24.EL4.s390x.rpm	SHA-256: 76b54f71927aa0986bc4ac342f48d10c2def4cdb365db114e8b078d7ba0dc66c
s390
bind-9.2.4-24.EL4.s390.rpm	SHA-256: 5c0bcad8421f39c68447da9f004a2eae77ebefe706252e1cb09d117214e72079
bind-chroot-9.2.4-24.EL4.s390.rpm	SHA-256: 57932ed086e7732cf95d14fabd52c9f0eab0974051dc2d9750786db67e62d97b
bind-devel-9.2.4-24.EL4.s390.rpm	SHA-256: 65a1d33f6d32f8d69fe904adda73e8c526cf6c07b5603139946c8565b31c6266
bind-libs-9.2.4-24.EL4.s390.rpm	SHA-256: ab0657a6d8455e5625efccc9739c1a3ab476f5bd7b0bc38b947c58319d474600
bind-utils-9.2.4-24.EL4.s390.rpm	SHA-256: 218649ae2ba9f7560d37fbbd68b98b5642e3c75fe7aa02686979fb1a93aed689

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
bind-9.2.4-24.EL4.ppc.rpm	SHA-256: 21008c820d331eebe2d289bfd2e12856430497003bc1144b1a14cec277ce45fb
bind-chroot-9.2.4-24.EL4.ppc.rpm	SHA-256: ffc62e62f4b0d6d31263145216d0740dcf459e5d9fece8f04e315785213262cb
bind-devel-9.2.4-24.EL4.ppc.rpm	SHA-256: 362cdaebe8322e9d18caf414a4152c54df55da18ca06060f0be67d6b3973526e
bind-libs-9.2.4-24.EL4.ppc.rpm	SHA-256: 1efc13311850072872106969d9a2212ebb993f57e343d2113039a464cf348319
bind-libs-9.2.4-24.EL4.ppc64.rpm	SHA-256: 90ed33e2b713733ffe6047c4169df0ae8f366ee1cc612dd1f47caef55e137395
bind-utils-9.2.4-24.EL4.ppc.rpm	SHA-256: 3a24b0a0f7a9814f8346c1ba2b0b416d762b2b894cc5512486c364a32b35d5d5