Synopsis

Important: bind97 security update

Type/Severity

Security Advisory: Important

Topic

Updated bind97 packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

An uninitialized data structure use flaw was found in BIND when DNSSEC
validation was enabled. A remote attacker able to send a large number of
queries to a DNSSEC validating BIND resolver could use this flaw to cause
it to exit unexpectedly with an assertion failure. (CVE-2012-3817)

Users of bind97 are advised to upgrade to these updated packages, which
correct this issue. After installing the update, the BIND daemon (named)
will be restarted automatically.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 842897 - CVE-2012-3817 bind: heavy DNSSEC validation load can cause assertion failure

CVEs

• CVE-2012-3817

References

• https://access.redhat.com/security/updates/classification/#important
• http://www.isc.org/software/bind/advisories/cve-2012-3817

Red Hat Enterprise Linux Server 5

SRPM
bind97-9.7.0-10.P2.el5_8.2.src.rpm	SHA-256: 67e6491633c4f3a7ca2c66c2ac8ac5a6cee320674e3f8b711df7e41a4cb0f844
x86_64
bind97-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: a9ac2a10c15f1b37d31d3e46a80341334316be390d17531f7b4c5064e30540fa
bind97-chroot-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: 620334a22490f7cbc491261e97d82f45d72529048d660e45453e40b91d40e5e4
bind97-debuginfo-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7a55514ece83b88beff3c144eea5e0a9bfbd9dc81ad5c86d813a886a3a729592
bind97-debuginfo-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: ec6293960af09dfaeb9252ae32f95b4ceabffd203e1fadf358f9aeac16fa128f
bind97-devel-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7e89198f3c32e64a9e2d43d2177f8481d1ed6317ee94d6b7b056c0693bbc704d
bind97-devel-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: 55617d4a0855d96e1f7535dac92daa1a87dd625a86f1f840942e56fd08d9c1ae
bind97-libs-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 9fb9712aff640c498fe55b1f4b34e983492965922e5bf1c319b5e33ffac60023
bind97-libs-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: 1b1dc35eb9cabd3dcec4178c66a5aeb0335e2865bc816d80d085a17d7e2cd9f5
bind97-utils-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: c482552d982b7005c0001096e4b79fae994907c06a668d68a68da2bf2558abf7
ia64
bind97-9.7.0-10.P2.el5_8.2.ia64.rpm	SHA-256: cc6cacd970b5783df5004419033dbc86a553671a6b7a21e86ed8c7a4a667263c
bind97-chroot-9.7.0-10.P2.el5_8.2.ia64.rpm	SHA-256: 18505dd10857b950beea6e6ba860ec0884d8959156a173598e0e6ce87250e9b3
bind97-debuginfo-9.7.0-10.P2.el5_8.2.ia64.rpm	SHA-256: ebcec166c73b4e1ac0bca74df8e4588e1100f638bac3bb006e33854a37447482
bind97-devel-9.7.0-10.P2.el5_8.2.ia64.rpm	SHA-256: c317df659501e2a590e427e166bc54a8be86147fd1820cd6b0ee5f0153a4f3a1
bind97-libs-9.7.0-10.P2.el5_8.2.ia64.rpm	SHA-256: 056916bb516209ad978874e8461eee8e1a4ca26b4222c052b201ec6f67c59a0f
bind97-utils-9.7.0-10.P2.el5_8.2.ia64.rpm	SHA-256: 2da4c151b3ca457449b149e49559504ec2014bdba2e6a39c465a94f4a6dce3ed
i386
bind97-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 13fd11eee004dd77a6753db72729cf0598390282d300e5464309a6cd068dd5e8
bind97-chroot-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 0881d77866624ccfe4b2783fbe3bb411939951ef8dbc0433420f20bf3db2a609
bind97-debuginfo-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7a55514ece83b88beff3c144eea5e0a9bfbd9dc81ad5c86d813a886a3a729592
bind97-devel-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7e89198f3c32e64a9e2d43d2177f8481d1ed6317ee94d6b7b056c0693bbc704d
bind97-libs-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 9fb9712aff640c498fe55b1f4b34e983492965922e5bf1c319b5e33ffac60023
bind97-utils-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: c02d816f291736d00f899ff46fe684ec0850b57f7a4694b3c418ec0eb9ea2e9b

Red Hat Enterprise Linux Workstation 5

SRPM
bind97-9.7.0-10.P2.el5_8.2.src.rpm	SHA-256: 67e6491633c4f3a7ca2c66c2ac8ac5a6cee320674e3f8b711df7e41a4cb0f844
x86_64
bind97-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: a9ac2a10c15f1b37d31d3e46a80341334316be390d17531f7b4c5064e30540fa
bind97-chroot-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: 620334a22490f7cbc491261e97d82f45d72529048d660e45453e40b91d40e5e4
bind97-debuginfo-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7a55514ece83b88beff3c144eea5e0a9bfbd9dc81ad5c86d813a886a3a729592
bind97-debuginfo-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: ec6293960af09dfaeb9252ae32f95b4ceabffd203e1fadf358f9aeac16fa128f
bind97-devel-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7e89198f3c32e64a9e2d43d2177f8481d1ed6317ee94d6b7b056c0693bbc704d
bind97-devel-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: 55617d4a0855d96e1f7535dac92daa1a87dd625a86f1f840942e56fd08d9c1ae
bind97-libs-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 9fb9712aff640c498fe55b1f4b34e983492965922e5bf1c319b5e33ffac60023
bind97-libs-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: 1b1dc35eb9cabd3dcec4178c66a5aeb0335e2865bc816d80d085a17d7e2cd9f5
bind97-utils-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: c482552d982b7005c0001096e4b79fae994907c06a668d68a68da2bf2558abf7
i386
bind97-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 13fd11eee004dd77a6753db72729cf0598390282d300e5464309a6cd068dd5e8
bind97-chroot-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 0881d77866624ccfe4b2783fbe3bb411939951ef8dbc0433420f20bf3db2a609
bind97-debuginfo-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7a55514ece83b88beff3c144eea5e0a9bfbd9dc81ad5c86d813a886a3a729592
bind97-devel-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7e89198f3c32e64a9e2d43d2177f8481d1ed6317ee94d6b7b056c0693bbc704d
bind97-libs-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 9fb9712aff640c498fe55b1f4b34e983492965922e5bf1c319b5e33ffac60023
bind97-utils-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: c02d816f291736d00f899ff46fe684ec0850b57f7a4694b3c418ec0eb9ea2e9b

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
bind97-9.7.0-10.P2.el5_8.2.src.rpm	SHA-256: 67e6491633c4f3a7ca2c66c2ac8ac5a6cee320674e3f8b711df7e41a4cb0f844
s390x
bind97-9.7.0-10.P2.el5_8.2.s390x.rpm	SHA-256: 0006319a3d7e39ad224d4c9388dae957d60fe7240373fbe1aca1f99ea617edf3
bind97-chroot-9.7.0-10.P2.el5_8.2.s390x.rpm	SHA-256: 3761144cf4c7f597e309d1b5c667c7825f921037814e0274e311f86fd6b8dfed
bind97-debuginfo-9.7.0-10.P2.el5_8.2.s390.rpm	SHA-256: 614a6a2fd2c1c0e4176080791163129100c382b13fc8b10b8b28a3c35c02d7e3
bind97-debuginfo-9.7.0-10.P2.el5_8.2.s390x.rpm	SHA-256: b9787d2f526166a49481b567f0d5515cc1364b02b98f1659bcb9fa6f8c5b88c4
bind97-devel-9.7.0-10.P2.el5_8.2.s390.rpm	SHA-256: 3039ce77f5aa47007de5b8b59fb9d887cb281c847645ac7f642505567fe74c70
bind97-devel-9.7.0-10.P2.el5_8.2.s390x.rpm	SHA-256: 84645616b80c582207547f22f5e7a2bfa5a09d741eef037cc298440ab4ddcd73
bind97-libs-9.7.0-10.P2.el5_8.2.s390.rpm	SHA-256: e35318f3325de37bb85ae4841874c75f6cf5f7d2eb0de60c70b16aac16caf928
bind97-libs-9.7.0-10.P2.el5_8.2.s390x.rpm	SHA-256: fe480ed44eaf2de1c1a98f5588cd722b5e26cc78d22f48542c1a4e94515eefe6
bind97-utils-9.7.0-10.P2.el5_8.2.s390x.rpm	SHA-256: dfd793152e402c8eedff72017527bc088cca5f5252deef9b54f086639e802084

Red Hat Enterprise Linux for Power, big endian 5

SRPM
bind97-9.7.0-10.P2.el5_8.2.src.rpm	SHA-256: 67e6491633c4f3a7ca2c66c2ac8ac5a6cee320674e3f8b711df7e41a4cb0f844
ppc
bind97-9.7.0-10.P2.el5_8.2.ppc.rpm	SHA-256: 2b8d2aa09846b8be43c1b713a5e24344865f782004425c0c07c1260e2893339f
bind97-chroot-9.7.0-10.P2.el5_8.2.ppc.rpm	SHA-256: e43d9282047c4d6d4a1dc8e2b10defa72ae39e8b4e4bb972fa0b935edd7f3fee
bind97-debuginfo-9.7.0-10.P2.el5_8.2.ppc.rpm	SHA-256: f664009e2c293dd2d7cece33152e2fb607e1541077caab8cbe83ebb1bd6d2a1a
bind97-debuginfo-9.7.0-10.P2.el5_8.2.ppc64.rpm	SHA-256: 8826396fe1d36726fce577f397a3af2e281eeb150f3a24506101dfb5920dc50c
bind97-devel-9.7.0-10.P2.el5_8.2.ppc.rpm	SHA-256: 83d7df2d29b4bf007a5d468fa1741a5a51b843e8beb0b5be895ce8bb7854876a
bind97-devel-9.7.0-10.P2.el5_8.2.ppc64.rpm	SHA-256: 63dad75b255376d458ba41dae6bd01cb15798124f3e3c71379fb2bc2d9e52b17
bind97-libs-9.7.0-10.P2.el5_8.2.ppc.rpm	SHA-256: cc29f5a4083b1d339a36c1a80f6a2d56eb8c0b56b3448f61850a985acdf10da9
bind97-libs-9.7.0-10.P2.el5_8.2.ppc64.rpm	SHA-256: bfea63c36789bc3063165b85ef6628f7eae25e42218cb9f3f6ab0317a41b6814
bind97-utils-9.7.0-10.P2.el5_8.2.ppc.rpm	SHA-256: fdda7509c97acbe87f5ca87dd952acbffafef8b7089e8f564af368ab833d5cb9

Red Hat Enterprise Linux Server from RHUI 5

SRPM
bind97-9.7.0-10.P2.el5_8.2.src.rpm	SHA-256: 67e6491633c4f3a7ca2c66c2ac8ac5a6cee320674e3f8b711df7e41a4cb0f844
x86_64
bind97-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: a9ac2a10c15f1b37d31d3e46a80341334316be390d17531f7b4c5064e30540fa
bind97-chroot-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: 620334a22490f7cbc491261e97d82f45d72529048d660e45453e40b91d40e5e4
bind97-debuginfo-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7a55514ece83b88beff3c144eea5e0a9bfbd9dc81ad5c86d813a886a3a729592
bind97-debuginfo-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: ec6293960af09dfaeb9252ae32f95b4ceabffd203e1fadf358f9aeac16fa128f
bind97-devel-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7e89198f3c32e64a9e2d43d2177f8481d1ed6317ee94d6b7b056c0693bbc704d
bind97-devel-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: 55617d4a0855d96e1f7535dac92daa1a87dd625a86f1f840942e56fd08d9c1ae
bind97-libs-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 9fb9712aff640c498fe55b1f4b34e983492965922e5bf1c319b5e33ffac60023
bind97-libs-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: 1b1dc35eb9cabd3dcec4178c66a5aeb0335e2865bc816d80d085a17d7e2cd9f5
bind97-utils-9.7.0-10.P2.el5_8.2.x86_64.rpm	SHA-256: c482552d982b7005c0001096e4b79fae994907c06a668d68a68da2bf2558abf7
i386
bind97-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 13fd11eee004dd77a6753db72729cf0598390282d300e5464309a6cd068dd5e8
bind97-chroot-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 0881d77866624ccfe4b2783fbe3bb411939951ef8dbc0433420f20bf3db2a609
bind97-debuginfo-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7a55514ece83b88beff3c144eea5e0a9bfbd9dc81ad5c86d813a886a3a729592
bind97-devel-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 7e89198f3c32e64a9e2d43d2177f8481d1ed6317ee94d6b7b056c0693bbc704d
bind97-libs-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: 9fb9712aff640c498fe55b1f4b34e983492965922e5bf1c319b5e33ffac60023
bind97-utils-9.7.0-10.P2.el5_8.2.i386.rpm	SHA-256: c02d816f291736d00f899ff46fe684ec0850b57f7a4694b3c418ec0eb9ea2e9b