Synopsis

Important: bind97 security update

Type/Severity

Security Advisory: Important

Topic

Updated bind97 packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

A flaw was discovered in the way BIND handled certain DNS queries, which
caused it to cache an invalid record. A remote attacker could use this
flaw to send repeated queries for this invalid record, causing the
resolvers to exit unexpectedly due to a failed assertion. (CVE-2011-4313)

Users of bind97 are advised to upgrade to these updated packages, which
resolve this issue. After installing the update, the BIND daemon (named)
will be restarted automatically.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 754398 - CVE-2011-4313 bind: Remote denial of service against recursive servers via logging negative cache entry

CVEs

• CVE-2011-4313

References

• https://access.redhat.com/security/updates/classification/#important
• https://www.isc.org/software/bind/advisories/cve-2011-4313

Red Hat Enterprise Linux Server 5

SRPM
bind97-9.7.0-6.P2.el5_7.4.src.rpm	SHA-256: 049b0bdcc0d59477d9fb11bc130a64cb484605ff2a9f3947f7affda6fd1e86a1
x86_64
bind97-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 624c0dcb7e7e2bcbc5715c7d4db166a144e40b014dd8e8f19c5bf9091781f356
bind97-chroot-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 7398a37864be0ada2e7cb5538fabd11f8bcf6dc69c0f2e8def5ac924be0c91a5
bind97-devel-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 182456d5f06dd8df05dd9f6e42461febdf4676a0174f10fd6f117373727d0f3b
bind97-devel-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 5114e81907936f6ba1fb8d07ba5506bfa9ab0e885a69233e0078cc892cc0f251
bind97-libs-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 3df07c2e4648854d9e957c114865db81f65bda61214ad89492f6142ca973e268
bind97-libs-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 4d62039e78498f376cd9d9775154881070f448fb90bb47213e6d3da55ee0d7ca
bind97-utils-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: d8972cbb2201f7c88080ec50e4c89ca03e64f7246c9703f5b14fc377087c7728
ia64
bind97-9.7.0-6.P2.el5_7.4.ia64.rpm	SHA-256: 4228f9a3d476007f6c1501de41df9f17ea2196cd89a9ae9a5555ab3999be7322
bind97-chroot-9.7.0-6.P2.el5_7.4.ia64.rpm	SHA-256: 9b6cae49fdbf6276d3baec042967c0d20a50ad647b670cd39e2fc85e177a36b3
bind97-devel-9.7.0-6.P2.el5_7.4.ia64.rpm	SHA-256: 65280d8610e29899a46922a269b9a4305b32b9e5416906fdb18ed8f8bf22e103
bind97-libs-9.7.0-6.P2.el5_7.4.ia64.rpm	SHA-256: ba45cef67b2c7b55a7a461ff8efbc8f77c7e78443e8aa568836bfd76be1979a7
bind97-utils-9.7.0-6.P2.el5_7.4.ia64.rpm	SHA-256: 59bc5dd7a59dfb072e3c30721586e82316c2317c700f2914804930099f7dad26
i386
bind97-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 4bf302f9f4a1484eb0535581bbb84dcad203717b9e7477344ee928f419d9a04c
bind97-chroot-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 8db941673b60f77b45a85a5e46415de74d5e7d3e3bdb3f036ec94b99d68ee51c
bind97-devel-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 182456d5f06dd8df05dd9f6e42461febdf4676a0174f10fd6f117373727d0f3b
bind97-libs-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 3df07c2e4648854d9e957c114865db81f65bda61214ad89492f6142ca973e268
bind97-utils-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: a7f6f75a6d9bf8724ad43591996992d1898296cb2d181818e9ed20e0237d6ae7

Red Hat Enterprise Linux Workstation 5

SRPM
bind97-9.7.0-6.P2.el5_7.4.src.rpm	SHA-256: 049b0bdcc0d59477d9fb11bc130a64cb484605ff2a9f3947f7affda6fd1e86a1
x86_64
bind97-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 624c0dcb7e7e2bcbc5715c7d4db166a144e40b014dd8e8f19c5bf9091781f356
bind97-chroot-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 7398a37864be0ada2e7cb5538fabd11f8bcf6dc69c0f2e8def5ac924be0c91a5
bind97-devel-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 182456d5f06dd8df05dd9f6e42461febdf4676a0174f10fd6f117373727d0f3b
bind97-devel-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 5114e81907936f6ba1fb8d07ba5506bfa9ab0e885a69233e0078cc892cc0f251
bind97-libs-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 3df07c2e4648854d9e957c114865db81f65bda61214ad89492f6142ca973e268
bind97-libs-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 4d62039e78498f376cd9d9775154881070f448fb90bb47213e6d3da55ee0d7ca
bind97-utils-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: d8972cbb2201f7c88080ec50e4c89ca03e64f7246c9703f5b14fc377087c7728
i386
bind97-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 4bf302f9f4a1484eb0535581bbb84dcad203717b9e7477344ee928f419d9a04c
bind97-chroot-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 8db941673b60f77b45a85a5e46415de74d5e7d3e3bdb3f036ec94b99d68ee51c
bind97-devel-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 182456d5f06dd8df05dd9f6e42461febdf4676a0174f10fd6f117373727d0f3b
bind97-libs-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 3df07c2e4648854d9e957c114865db81f65bda61214ad89492f6142ca973e268
bind97-utils-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: a7f6f75a6d9bf8724ad43591996992d1898296cb2d181818e9ed20e0237d6ae7

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
bind97-9.7.0-6.P2.el5_7.4.src.rpm	SHA-256: 049b0bdcc0d59477d9fb11bc130a64cb484605ff2a9f3947f7affda6fd1e86a1
s390x
bind97-9.7.0-6.P2.el5_7.4.s390x.rpm	SHA-256: d9bd399429916b01d70ef71140fd733529bb76f2ac8a32c3a297ea4cd4337ce7
bind97-chroot-9.7.0-6.P2.el5_7.4.s390x.rpm	SHA-256: f2561712badaf57704e1c71384e9b1d78c533cd07e702f13ff0ae20c02683966
bind97-devel-9.7.0-6.P2.el5_7.4.s390.rpm	SHA-256: 642d7a8022619e9b0f0f3c23183b118f5b21784b4560557d47be9ddd2d6d4189
bind97-devel-9.7.0-6.P2.el5_7.4.s390x.rpm	SHA-256: 5fb9b70529a3b012074ecb8cc031cc6b86620613c0e8433167092b37bde58a67
bind97-libs-9.7.0-6.P2.el5_7.4.s390.rpm	SHA-256: 09c6cf02b88d4ffdd77d53c24b77edcf077e53576de048134e18dac3c3d1c0e4
bind97-libs-9.7.0-6.P2.el5_7.4.s390x.rpm	SHA-256: d6ec4b9af1903630a26615c2771bf3f09da8e527b4ef84fe5d58282845c99acd
bind97-utils-9.7.0-6.P2.el5_7.4.s390x.rpm	SHA-256: 18e727b3849f551f1a726b28ab29d889d2c5017ebc7968c397056704e8aa28ae

Red Hat Enterprise Linux for Power, big endian 5

SRPM
bind97-9.7.0-6.P2.el5_7.4.src.rpm	SHA-256: 049b0bdcc0d59477d9fb11bc130a64cb484605ff2a9f3947f7affda6fd1e86a1
ppc
bind97-9.7.0-6.P2.el5_7.4.ppc.rpm	SHA-256: 42aa9cfd00f3ec601ffab743aef50a08e6c27c42107dafb4359dfdfe594858cc
bind97-chroot-9.7.0-6.P2.el5_7.4.ppc.rpm	SHA-256: 3b7cc08c59d853e837d35e43184f190ffd194ae37035d3e85bb93c69ed21cd46
bind97-devel-9.7.0-6.P2.el5_7.4.ppc.rpm	SHA-256: 663f667cbd8a61ae8fa38652cf537af50a3629935902c02325a47420e2c2913c
bind97-devel-9.7.0-6.P2.el5_7.4.ppc64.rpm	SHA-256: 3a3c212eef8ff133879cc6fc863db9515538d5a6b29eee0d6dd727949dcf0f21
bind97-libs-9.7.0-6.P2.el5_7.4.ppc.rpm	SHA-256: afe5182c7a068e31645bcc2c0a3e99c7d8740356a35279a67f6f1f2f672b641b
bind97-libs-9.7.0-6.P2.el5_7.4.ppc64.rpm	SHA-256: 4cf3d9431f35253c260e4f441484b4d8c544fab139bde0ccf07394fb1e519355
bind97-utils-9.7.0-6.P2.el5_7.4.ppc.rpm	SHA-256: adb9c387322b22c8ee2fd24661fa1c5b3e2ea34edec4471f8e036cf1490f1872

Red Hat Enterprise Linux Server from RHUI 5

SRPM
bind97-9.7.0-6.P2.el5_7.4.src.rpm	SHA-256: 049b0bdcc0d59477d9fb11bc130a64cb484605ff2a9f3947f7affda6fd1e86a1
x86_64
bind97-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 624c0dcb7e7e2bcbc5715c7d4db166a144e40b014dd8e8f19c5bf9091781f356
bind97-chroot-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 7398a37864be0ada2e7cb5538fabd11f8bcf6dc69c0f2e8def5ac924be0c91a5
bind97-devel-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 182456d5f06dd8df05dd9f6e42461febdf4676a0174f10fd6f117373727d0f3b
bind97-devel-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 5114e81907936f6ba1fb8d07ba5506bfa9ab0e885a69233e0078cc892cc0f251
bind97-libs-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 3df07c2e4648854d9e957c114865db81f65bda61214ad89492f6142ca973e268
bind97-libs-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: 4d62039e78498f376cd9d9775154881070f448fb90bb47213e6d3da55ee0d7ca
bind97-utils-9.7.0-6.P2.el5_7.4.x86_64.rpm	SHA-256: d8972cbb2201f7c88080ec50e4c89ca03e64f7246c9703f5b14fc377087c7728
i386
bind97-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 4bf302f9f4a1484eb0535581bbb84dcad203717b9e7477344ee928f419d9a04c
bind97-chroot-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 8db941673b60f77b45a85a5e46415de74d5e7d3e3bdb3f036ec94b99d68ee51c
bind97-devel-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 182456d5f06dd8df05dd9f6e42461febdf4676a0174f10fd6f117373727d0f3b
bind97-libs-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: 3df07c2e4648854d9e957c114865db81f65bda61214ad89492f6142ca973e268
bind97-utils-9.7.0-6.P2.el5_7.4.i386.rpm	SHA-256: a7f6f75a6d9bf8724ad43591996992d1898296cb2d181818e9ed20e0237d6ae7