Synopsis

Important: bind97 security update

Type/Severity

Security Advisory: Important

Topic

Updated bind97 packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

A denial of service flaw was found in the way BIND followed DNS
delegations. A remote attacker could use a specially crafted zone
containing a large number of referrals which, when looked up and processed,
would cause named to use excessive amounts of memory or crash.
(CVE-2014-8500)

All bind97 users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
update, the BIND daemon (named) will be restarted automatically.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 1171912 - CVE-2014-8500 bind: delegation handling denial of service

CVEs

• CVE-2014-8500

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 5

SRPM
bind97-9.7.0-21.P2.el5_11.1.src.rpm	SHA-256: eb4cfade12006100683ec664386fc1b5eaaa30a997911e513e3e9bdf86d52cfa
x86_64
bind97-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 5879cfa6fb0883734942ab30a557ffc762b9c4546d8c17b51ce4b0f85ad25d85
bind97-chroot-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 4f86180313b744d6656e1585f469de993e74e07ffbd03cbf9f211545dd9bf5c2
bind97-debuginfo-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 45e3249d559acac2ebfe101be2984ecba71c6d43251262dd0ffc68a0a6a83e2f
bind97-debuginfo-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: f92167be0cae0d9f050d32c867d383e9e404e2b798f60c8f983765e098a59f82
bind97-devel-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 1b221315134b1ccd09610b038e727ce5d90bd3cd81caa03b1b2b06695dfc4f9b
bind97-devel-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 18ae330ac544d1b705cd1c09a3202ad11182b0e48c6dfa028d857d656533cea6
bind97-libs-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: cc85026bb19c78d068c2a1aa1a4ebf498fb300a809603776e648c2ea0c6a7d2d
bind97-libs-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: d4a125daa06c0d72cca782a98206672163224ab9c267dfe151fee4d284f3ac5a
bind97-utils-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 6af9a47e33f4c2d0d80057955cd1e9f8b9995c967a9349c34298204d2c5d13cb
ia64
bind97-9.7.0-21.P2.el5_11.1.ia64.rpm	SHA-256: 00f64897f28b8c2d12d9337521ca1504c073e2d01e045d1b58b18c8cec4f28fc
bind97-chroot-9.7.0-21.P2.el5_11.1.ia64.rpm	SHA-256: 0eb69c04c0fe1bbbbf9093cfc092660d504a1325235ac2606949ec37d0f659cb
bind97-debuginfo-9.7.0-21.P2.el5_11.1.ia64.rpm	SHA-256: 94f77fa1d9302f10247ff0b38d19438915464918a0fe03abe7a479271cce9641
bind97-devel-9.7.0-21.P2.el5_11.1.ia64.rpm	SHA-256: 9faa98eece2f42ef24aab8d6c28cde6263233e7eaa6e61f0600e521c55790104
bind97-libs-9.7.0-21.P2.el5_11.1.ia64.rpm	SHA-256: 961467f961e0297da8c264bfe37e972ed130d720135dfbfe74f0b65dd2f2f8a8
bind97-utils-9.7.0-21.P2.el5_11.1.ia64.rpm	SHA-256: 60e2379dced7fa9406ae2be99f038cd743b2bd64069070941ca1d08012721f24
i386
bind97-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: d19e19066eaeedff9b59edca6927f27da3a5fcdefe83a14623ff5553dc2dc365
bind97-chroot-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 0691cbff5dbf64241c9e27782d25c7bbf856d6cba018655f2b8bbad7f3fea058
bind97-debuginfo-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 45e3249d559acac2ebfe101be2984ecba71c6d43251262dd0ffc68a0a6a83e2f
bind97-devel-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 1b221315134b1ccd09610b038e727ce5d90bd3cd81caa03b1b2b06695dfc4f9b
bind97-libs-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: cc85026bb19c78d068c2a1aa1a4ebf498fb300a809603776e648c2ea0c6a7d2d
bind97-utils-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 8b1966715e9e601af65e45b0a44a2064506a19a816f8068aa0e5981ab2e610e0

Red Hat Enterprise Linux Workstation 5

SRPM
bind97-9.7.0-21.P2.el5_11.1.src.rpm	SHA-256: eb4cfade12006100683ec664386fc1b5eaaa30a997911e513e3e9bdf86d52cfa
x86_64
bind97-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 5879cfa6fb0883734942ab30a557ffc762b9c4546d8c17b51ce4b0f85ad25d85
bind97-chroot-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 4f86180313b744d6656e1585f469de993e74e07ffbd03cbf9f211545dd9bf5c2
bind97-debuginfo-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 45e3249d559acac2ebfe101be2984ecba71c6d43251262dd0ffc68a0a6a83e2f
bind97-debuginfo-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: f92167be0cae0d9f050d32c867d383e9e404e2b798f60c8f983765e098a59f82
bind97-devel-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 1b221315134b1ccd09610b038e727ce5d90bd3cd81caa03b1b2b06695dfc4f9b
bind97-devel-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 18ae330ac544d1b705cd1c09a3202ad11182b0e48c6dfa028d857d656533cea6
bind97-libs-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: cc85026bb19c78d068c2a1aa1a4ebf498fb300a809603776e648c2ea0c6a7d2d
bind97-libs-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: d4a125daa06c0d72cca782a98206672163224ab9c267dfe151fee4d284f3ac5a
bind97-utils-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 6af9a47e33f4c2d0d80057955cd1e9f8b9995c967a9349c34298204d2c5d13cb
i386
bind97-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: d19e19066eaeedff9b59edca6927f27da3a5fcdefe83a14623ff5553dc2dc365
bind97-chroot-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 0691cbff5dbf64241c9e27782d25c7bbf856d6cba018655f2b8bbad7f3fea058
bind97-debuginfo-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 45e3249d559acac2ebfe101be2984ecba71c6d43251262dd0ffc68a0a6a83e2f
bind97-devel-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 1b221315134b1ccd09610b038e727ce5d90bd3cd81caa03b1b2b06695dfc4f9b
bind97-libs-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: cc85026bb19c78d068c2a1aa1a4ebf498fb300a809603776e648c2ea0c6a7d2d
bind97-utils-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 8b1966715e9e601af65e45b0a44a2064506a19a816f8068aa0e5981ab2e610e0

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
bind97-9.7.0-21.P2.el5_11.1.src.rpm	SHA-256: eb4cfade12006100683ec664386fc1b5eaaa30a997911e513e3e9bdf86d52cfa
s390x
bind97-9.7.0-21.P2.el5_11.1.s390x.rpm	SHA-256: c5fab1f263ad4259b5da23889704ec55d94ca6680af32eaa7555591c03752e41
bind97-chroot-9.7.0-21.P2.el5_11.1.s390x.rpm	SHA-256: c0ae66b9716b904305dbbb783cdc412767ce0a50f09c880aabeb526cf88c26f5
bind97-debuginfo-9.7.0-21.P2.el5_11.1.s390.rpm	SHA-256: 05e04f99e37876c67a4fbf4720f46fe8473b7bd5c16749b3688ef046145fb397
bind97-debuginfo-9.7.0-21.P2.el5_11.1.s390x.rpm	SHA-256: 1d808f8e49ef5dd097d8430f04ef7ad21f8f29e43b070bed5b32f261ad4bfbbb
bind97-devel-9.7.0-21.P2.el5_11.1.s390.rpm	SHA-256: 4d3c208e5b9fcabea804f45b793f1ea3e6f4ba86d8a6d28fd0524f0d91bc628f
bind97-devel-9.7.0-21.P2.el5_11.1.s390x.rpm	SHA-256: 9684e3b43e01c0e641d7473e27b7e1f6a9d198080ce1cdf9017cd18688962c62
bind97-libs-9.7.0-21.P2.el5_11.1.s390.rpm	SHA-256: ad063761e0ffce0827e68f370e8a800b9be4c431c33b2e1609d91690f4b6f3ea
bind97-libs-9.7.0-21.P2.el5_11.1.s390x.rpm	SHA-256: e16e4d770fb51522902bedde34bb809cbed064b152ceafc16ea62250f293ff38
bind97-utils-9.7.0-21.P2.el5_11.1.s390x.rpm	SHA-256: 7249e29061b27b958888e05ea26aadf96b6ee3ef6d14b2823d2ea2882edc3b0f

Red Hat Enterprise Linux for Power, big endian 5

SRPM
bind97-9.7.0-21.P2.el5_11.1.src.rpm	SHA-256: eb4cfade12006100683ec664386fc1b5eaaa30a997911e513e3e9bdf86d52cfa
ppc
bind97-9.7.0-21.P2.el5_11.1.ppc.rpm	SHA-256: 6a8149d828d938797bee39121cf33e0e2fbdbf0ce6597fbd7f3308265fa79fdb
bind97-chroot-9.7.0-21.P2.el5_11.1.ppc.rpm	SHA-256: 692616c8d86b898c7dc037210cedfd1d565b691363c1ac58cbde3d30a11fd494
bind97-debuginfo-9.7.0-21.P2.el5_11.1.ppc.rpm	SHA-256: 945adb19e1668377d70e9232ce404c5cee8a2c3c01990036436e534c20c7ea26
bind97-debuginfo-9.7.0-21.P2.el5_11.1.ppc64.rpm	SHA-256: e1c58ce04e5da8624cf64756f51fc6bd3cdedb795ba2bdfde2e37e1aa95983a8
bind97-devel-9.7.0-21.P2.el5_11.1.ppc.rpm	SHA-256: e78502064d42ad93fcb585df1c983d380ffe8109912d7a85d31910003a90962e
bind97-devel-9.7.0-21.P2.el5_11.1.ppc64.rpm	SHA-256: c975b1a2bd7816abbe1e077472ec2f8bcbd83f4a3f6e6a2b1e07411192f1c4a7
bind97-libs-9.7.0-21.P2.el5_11.1.ppc.rpm	SHA-256: 4f0b8fa7039392f3bc344ea18761ac633f1a695ccde46007198888900274e72f
bind97-libs-9.7.0-21.P2.el5_11.1.ppc64.rpm	SHA-256: 50c5d3c8e9d81d74c2489918f6f557f5cf260632b50b0eb97146b61d103218c4
bind97-utils-9.7.0-21.P2.el5_11.1.ppc.rpm	SHA-256: 4d5f8f819b4fc35a8528248321f1d586a24db041db08fc90b3c193f34ba2df7f

Red Hat Enterprise Linux Server from RHUI 5

SRPM
bind97-9.7.0-21.P2.el5_11.1.src.rpm	SHA-256: eb4cfade12006100683ec664386fc1b5eaaa30a997911e513e3e9bdf86d52cfa
x86_64
bind97-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 5879cfa6fb0883734942ab30a557ffc762b9c4546d8c17b51ce4b0f85ad25d85
bind97-chroot-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 4f86180313b744d6656e1585f469de993e74e07ffbd03cbf9f211545dd9bf5c2
bind97-debuginfo-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 45e3249d559acac2ebfe101be2984ecba71c6d43251262dd0ffc68a0a6a83e2f
bind97-debuginfo-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: f92167be0cae0d9f050d32c867d383e9e404e2b798f60c8f983765e098a59f82
bind97-devel-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 1b221315134b1ccd09610b038e727ce5d90bd3cd81caa03b1b2b06695dfc4f9b
bind97-devel-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 18ae330ac544d1b705cd1c09a3202ad11182b0e48c6dfa028d857d656533cea6
bind97-libs-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: cc85026bb19c78d068c2a1aa1a4ebf498fb300a809603776e648c2ea0c6a7d2d
bind97-libs-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: d4a125daa06c0d72cca782a98206672163224ab9c267dfe151fee4d284f3ac5a
bind97-utils-9.7.0-21.P2.el5_11.1.x86_64.rpm	SHA-256: 6af9a47e33f4c2d0d80057955cd1e9f8b9995c967a9349c34298204d2c5d13cb
i386
bind97-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: d19e19066eaeedff9b59edca6927f27da3a5fcdefe83a14623ff5553dc2dc365
bind97-chroot-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 0691cbff5dbf64241c9e27782d25c7bbf856d6cba018655f2b8bbad7f3fea058
bind97-debuginfo-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 45e3249d559acac2ebfe101be2984ecba71c6d43251262dd0ffc68a0a6a83e2f
bind97-devel-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 1b221315134b1ccd09610b038e727ce5d90bd3cd81caa03b1b2b06695dfc4f9b
bind97-libs-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: cc85026bb19c78d068c2a1aa1a4ebf498fb300a809603776e648c2ea0c6a7d2d
bind97-utils-9.7.0-21.P2.el5_11.1.i386.rpm	SHA-256: 8b1966715e9e601af65e45b0a44a2064506a19a816f8068aa0e5981ab2e610e0