Synopsis

Important: bind security update

Type/Severity

Security Advisory: Important

Topic

Updated bind packages that fix a security issue are now available for Red
Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

[Updated 29th July 2009]
The packages in this erratum have been updated to also correct this issue
in the bind-sdb package.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

A flaw was found in the way BIND handles dynamic update message packets
containing the "ANY" record type. A remote attacker could use this flaw to
send a specially-crafted dynamic update packet that could cause named to
exit with an assertion failure. (CVE-2009-0696)

Note: even if named is not configured for dynamic updates, receiving such
a specially-crafted dynamic update packet could still cause named to exit
unexpectedly.

All BIND users are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue. After installing the
update, the BIND daemon (named) will be restarted automatically.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Server - Extended Update Support 5.3 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 5.3 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 5.3 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.3 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386
• Red Hat Enterprise Linux Server - AUS 5.3 x86_64
• Red Hat Enterprise Linux Server - AUS 5.3 ia64
• Red Hat Enterprise Linux Server - AUS 5.3 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.3 ppc

Fixes

• BZ - 514292 - CVE-2009-0696 bind: DoS (assertion failure) via nsupdate packets

CVEs

• CVE-2009-0696

References

• http://www.redhat.com/security/updates/classification/#important
• https://www.isc.org/node/474

Red Hat Enterprise Linux Server 5

SRPM
x86_64
bind-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: e0d69e4c039b35f03d653e0202f94bada2b0031c66895958f9ed701d4e802d1f
bind-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: e7bb2c01d72a7a24b407a370d5276edb359b0fb2655a27e33623ea32a47d360d
bind-chroot-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: a13a1d49571b67c996919cc6c46767d8637c85956696aa5f78bcfe76f1a709d4
bind-chroot-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 3de9b21c0b5f07e5b4c9cdbd0a652e11f9475141a9f7f7532ae668b48060c8f2
bind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: dc3443521ab7c377ea5295eca32415956180354cd5c9454c9811ce29c70a7246
bind-devel-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: 1cd6d5f60900d1e29d9141fd39eeb89ed8ab08680dbbf1dcfd8e1c86c9518111
bind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: fe3422490c17591c87f9f736546cff86d029b5280c221f3cc24119c97baa526c
bind-devel-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 395b1c808fe408d26f88320b75e01baf0e4ae68babafe1fc751ff7745e31ef31
bind-libbind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: e7de033872c004fc7f63b443f610fb42513d9d2ce556ca0e20a5d5df174115a5
bind-libbind-devel-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: 64f5376bc32396459752b99259bea8d9900a8c9660c65bac82bfed54d770fa0a
bind-libbind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: f8995f8fc25d2ecce1ce28a33c4966fd859adf2c28c0556093da9cac97a1ad59
bind-libbind-devel-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 1ffd1c3ba43f6869c365612af36725ec6ad0d00c7a35ecc82832b7c1ba0c77b6
bind-libs-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: 62bcd2ade7ceeeb4619861419c377e199fdb398bb748f2ed5e48e5d3f9625d8c
bind-libs-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: b38820ff30aa94c7f81328c9d2d4d92e03db4b58a64c1d6d87c822ebdd69e457
bind-libs-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: 69231a60bee083f27644961896cac08c26a1920f70c24d94884b3db3586a1ece
bind-libs-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 224967bddda37a83a1d45e074256e3dedf8322ee4394b2246e966402128cf2ac
bind-sdb-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: d4c3c239dac7c22a0099c8085d5a20114473fc988116cb6e8a3d5d10f5fa5a8f
bind-sdb-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 377cbf7ca6c0bf09ea9819a0721d95fea618c198fcb07b7b998349996be63db9
bind-utils-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: 016fd1aae045aadae45aadd24f08fd15ea824fcbdb3106c3a0662413646a7049
bind-utils-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 51cc675d6b9389cf1175cdc88dc156c215a2a60ca60e08456063e17e7c5c2b09
caching-nameserver-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: aed649b562f53fa5277f61879c3e196861562edd22c19601901104de70228abc
caching-nameserver-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: be9d92517747c7a48271d2b64a5799a598a721edc76fc0daaa4828e08e77e957
ia64
bind-libs-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: 62bcd2ade7ceeeb4619861419c377e199fdb398bb748f2ed5e48e5d3f9625d8c
bind-libs-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: 69231a60bee083f27644961896cac08c26a1920f70c24d94884b3db3586a1ece
i386
bind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: dc3443521ab7c377ea5295eca32415956180354cd5c9454c9811ce29c70a7246
bind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: fe3422490c17591c87f9f736546cff86d029b5280c221f3cc24119c97baa526c
bind-libbind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: e7de033872c004fc7f63b443f610fb42513d9d2ce556ca0e20a5d5df174115a5
bind-libbind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: f8995f8fc25d2ecce1ce28a33c4966fd859adf2c28c0556093da9cac97a1ad59
bind-libs-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: 62bcd2ade7ceeeb4619861419c377e199fdb398bb748f2ed5e48e5d3f9625d8c
bind-libs-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: 69231a60bee083f27644961896cac08c26a1920f70c24d94884b3db3586a1ece

Red Hat Enterprise Linux Workstation 5

SRPM
x86_64
bind-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: e0d69e4c039b35f03d653e0202f94bada2b0031c66895958f9ed701d4e802d1f
bind-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: e7bb2c01d72a7a24b407a370d5276edb359b0fb2655a27e33623ea32a47d360d
bind-chroot-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: a13a1d49571b67c996919cc6c46767d8637c85956696aa5f78bcfe76f1a709d4
bind-chroot-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 3de9b21c0b5f07e5b4c9cdbd0a652e11f9475141a9f7f7532ae668b48060c8f2
bind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: dc3443521ab7c377ea5295eca32415956180354cd5c9454c9811ce29c70a7246
bind-devel-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: 1cd6d5f60900d1e29d9141fd39eeb89ed8ab08680dbbf1dcfd8e1c86c9518111
bind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: fe3422490c17591c87f9f736546cff86d029b5280c221f3cc24119c97baa526c
bind-devel-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 395b1c808fe408d26f88320b75e01baf0e4ae68babafe1fc751ff7745e31ef31
bind-libbind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: e7de033872c004fc7f63b443f610fb42513d9d2ce556ca0e20a5d5df174115a5
bind-libbind-devel-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: 64f5376bc32396459752b99259bea8d9900a8c9660c65bac82bfed54d770fa0a
bind-libbind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: f8995f8fc25d2ecce1ce28a33c4966fd859adf2c28c0556093da9cac97a1ad59
bind-libbind-devel-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 1ffd1c3ba43f6869c365612af36725ec6ad0d00c7a35ecc82832b7c1ba0c77b6
bind-libs-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: 62bcd2ade7ceeeb4619861419c377e199fdb398bb748f2ed5e48e5d3f9625d8c
bind-libs-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: b38820ff30aa94c7f81328c9d2d4d92e03db4b58a64c1d6d87c822ebdd69e457
bind-libs-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: 69231a60bee083f27644961896cac08c26a1920f70c24d94884b3db3586a1ece
bind-libs-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 224967bddda37a83a1d45e074256e3dedf8322ee4394b2246e966402128cf2ac
bind-sdb-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: d4c3c239dac7c22a0099c8085d5a20114473fc988116cb6e8a3d5d10f5fa5a8f
bind-sdb-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 377cbf7ca6c0bf09ea9819a0721d95fea618c198fcb07b7b998349996be63db9
bind-utils-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: 016fd1aae045aadae45aadd24f08fd15ea824fcbdb3106c3a0662413646a7049
bind-utils-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 51cc675d6b9389cf1175cdc88dc156c215a2a60ca60e08456063e17e7c5c2b09
caching-nameserver-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: aed649b562f53fa5277f61879c3e196861562edd22c19601901104de70228abc
caching-nameserver-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: be9d92517747c7a48271d2b64a5799a598a721edc76fc0daaa4828e08e77e957
i386
bind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: dc3443521ab7c377ea5295eca32415956180354cd5c9454c9811ce29c70a7246
bind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: fe3422490c17591c87f9f736546cff86d029b5280c221f3cc24119c97baa526c
bind-libbind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: e7de033872c004fc7f63b443f610fb42513d9d2ce556ca0e20a5d5df174115a5
bind-libbind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: f8995f8fc25d2ecce1ce28a33c4966fd859adf2c28c0556093da9cac97a1ad59
bind-libs-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: 62bcd2ade7ceeeb4619861419c377e199fdb398bb748f2ed5e48e5d3f9625d8c
bind-libs-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: 69231a60bee083f27644961896cac08c26a1920f70c24d94884b3db3586a1ece

Red Hat Enterprise Linux Desktop 5

SRPM
x86_64
bind-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: e0d69e4c039b35f03d653e0202f94bada2b0031c66895958f9ed701d4e802d1f
bind-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: e7bb2c01d72a7a24b407a370d5276edb359b0fb2655a27e33623ea32a47d360d
bind-libs-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: 62bcd2ade7ceeeb4619861419c377e199fdb398bb748f2ed5e48e5d3f9625d8c
bind-libs-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: b38820ff30aa94c7f81328c9d2d4d92e03db4b58a64c1d6d87c822ebdd69e457
bind-libs-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: 69231a60bee083f27644961896cac08c26a1920f70c24d94884b3db3586a1ece
bind-libs-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 224967bddda37a83a1d45e074256e3dedf8322ee4394b2246e966402128cf2ac
bind-sdb-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: d4c3c239dac7c22a0099c8085d5a20114473fc988116cb6e8a3d5d10f5fa5a8f
bind-sdb-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 377cbf7ca6c0bf09ea9819a0721d95fea618c198fcb07b7b998349996be63db9
bind-utils-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: 016fd1aae045aadae45aadd24f08fd15ea824fcbdb3106c3a0662413646a7049
bind-utils-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 51cc675d6b9389cf1175cdc88dc156c215a2a60ca60e08456063e17e7c5c2b09
i386
bind-libs-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: 62bcd2ade7ceeeb4619861419c377e199fdb398bb748f2ed5e48e5d3f9625d8c
bind-libs-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: 69231a60bee083f27644961896cac08c26a1920f70c24d94884b3db3586a1ece

Red Hat Enterprise Linux Server from RHUI 5

SRPM
x86_64
bind-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: e0d69e4c039b35f03d653e0202f94bada2b0031c66895958f9ed701d4e802d1f
bind-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: e7bb2c01d72a7a24b407a370d5276edb359b0fb2655a27e33623ea32a47d360d
bind-chroot-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: a13a1d49571b67c996919cc6c46767d8637c85956696aa5f78bcfe76f1a709d4
bind-chroot-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 3de9b21c0b5f07e5b4c9cdbd0a652e11f9475141a9f7f7532ae668b48060c8f2
bind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: dc3443521ab7c377ea5295eca32415956180354cd5c9454c9811ce29c70a7246
bind-devel-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: 1cd6d5f60900d1e29d9141fd39eeb89ed8ab08680dbbf1dcfd8e1c86c9518111
bind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: fe3422490c17591c87f9f736546cff86d029b5280c221f3cc24119c97baa526c
bind-devel-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 395b1c808fe408d26f88320b75e01baf0e4ae68babafe1fc751ff7745e31ef31
bind-libbind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: e7de033872c004fc7f63b443f610fb42513d9d2ce556ca0e20a5d5df174115a5
bind-libbind-devel-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: 64f5376bc32396459752b99259bea8d9900a8c9660c65bac82bfed54d770fa0a
bind-libbind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: f8995f8fc25d2ecce1ce28a33c4966fd859adf2c28c0556093da9cac97a1ad59
bind-libbind-devel-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 1ffd1c3ba43f6869c365612af36725ec6ad0d00c7a35ecc82832b7c1ba0c77b6
bind-libs-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: 62bcd2ade7ceeeb4619861419c377e199fdb398bb748f2ed5e48e5d3f9625d8c
bind-libs-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: b38820ff30aa94c7f81328c9d2d4d92e03db4b58a64c1d6d87c822ebdd69e457
bind-libs-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: 69231a60bee083f27644961896cac08c26a1920f70c24d94884b3db3586a1ece
bind-libs-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 224967bddda37a83a1d45e074256e3dedf8322ee4394b2246e966402128cf2ac
bind-sdb-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: d4c3c239dac7c22a0099c8085d5a20114473fc988116cb6e8a3d5d10f5fa5a8f
bind-sdb-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 377cbf7ca6c0bf09ea9819a0721d95fea618c198fcb07b7b998349996be63db9
bind-utils-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: 016fd1aae045aadae45aadd24f08fd15ea824fcbdb3106c3a0662413646a7049
bind-utils-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: 51cc675d6b9389cf1175cdc88dc156c215a2a60ca60e08456063e17e7c5c2b09
caching-nameserver-9.3.4-10.P1.el5_3.2.x86_64.rpm	SHA-256: aed649b562f53fa5277f61879c3e196861562edd22c19601901104de70228abc
caching-nameserver-9.3.4-10.P1.el5_3.3.x86_64.rpm	SHA-256: be9d92517747c7a48271d2b64a5799a598a721edc76fc0daaa4828e08e77e957
i386
bind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: dc3443521ab7c377ea5295eca32415956180354cd5c9454c9811ce29c70a7246
bind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: fe3422490c17591c87f9f736546cff86d029b5280c221f3cc24119c97baa526c
bind-libbind-devel-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: e7de033872c004fc7f63b443f610fb42513d9d2ce556ca0e20a5d5df174115a5
bind-libbind-devel-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: f8995f8fc25d2ecce1ce28a33c4966fd859adf2c28c0556093da9cac97a1ad59
bind-libs-9.3.4-10.P1.el5_3.2.i386.rpm	SHA-256: 62bcd2ade7ceeeb4619861419c377e199fdb398bb748f2ed5e48e5d3f9625d8c
bind-libs-9.3.4-10.P1.el5_3.3.i386.rpm	SHA-256: 69231a60bee083f27644961896cac08c26a1920f70c24d94884b3db3586a1ece