Synopsis

Important: bind97 security update

Type/Severity

Security Advisory: Important

Topic

Updated bind97 packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

A denial of service flaw was found in the way BIND parsed certain malformed
DNSSEC keys. A remote attacker could use this flaw to send a specially
crafted DNS query (for example, a query requiring a response from a zone
containing a deliberately malformed key) that would cause named functioning
as a validating resolver to crash. (CVE-2015-5722)

Red Hat would like to thank ISC for reporting this issue. Upstream
acknowledges Hanno Bock as the original reporter.

All bind97 users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
update, the BIND daemon (named) will be restarted automatically.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 1259087 - CVE-2015-5722 bind: malformed DNSSEC key failed assertion denial of service

CVEs

• CVE-2015-5722

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 5

SRPM
bind97-9.7.0-21.P2.el5_11.3.src.rpm	SHA-256: 0a6636d991b1d4da63a8d4940cfc074c19af3fe7b502019fb4adbb0f9ac130c2
x86_64
bind97-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: 5064a2c5b7b2d2f8a3ac238e288b34a8f7b94984eb992e39e479cfe6e508169d
bind97-chroot-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: d25606ea4df8638732bf6b557ce7edccb6a9c7c973bdacdec1a3749e1c46d410
bind97-debuginfo-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: 8a363ab917a26b060f1bf422c407ca6fde60107c84a119345733d87218460a44
bind97-debuginfo-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: 58b8862d9dbcafcf2322613e881a09cd77905350e5f0212daf063ac3e706ea91
bind97-devel-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: d892409de8346c84329843a858c744a198369ecbb87c9e5feec73cc47fbd89b3
bind97-devel-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: 55c0d6b01f4bdd21dffbb07bff0a40f0db7182fb2c86300924d62ff6cb8a89f0
bind97-libs-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: f6c4dedbdf6035f92532f9c5c45e80c3f278467d8cc38370b9c7fdd73e06d4ab
bind97-libs-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: d5ddfcbf3a7e6137ca79b219d45b3c1aac8679447af785a913ae1e623334fa3f
bind97-utils-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: a08c3f3c468b5cdb889892161449a7bd249f7ce1b7ed130c008bcae5f4837d10
ia64
bind97-9.7.0-21.P2.el5_11.3.ia64.rpm	SHA-256: cd47ea032e7db9f134ebe29e93626cfe7b14135f0e7fc343d29af66f547cd16e
bind97-chroot-9.7.0-21.P2.el5_11.3.ia64.rpm	SHA-256: 8b92d5abecbb4ebc9f99bc2d77d6168f0effbc0a24c2624028e272d4378f3da2
bind97-debuginfo-9.7.0-21.P2.el5_11.3.ia64.rpm	SHA-256: b275ea77208968711a8eebe59fa6de69e0b2963e4bb54a7ccab431959aaed4dc
bind97-devel-9.7.0-21.P2.el5_11.3.ia64.rpm	SHA-256: e7f3e4002d5ffa269fa5774fa4154ad36f443f6b45b40638e987b4d368e10ac9
bind97-libs-9.7.0-21.P2.el5_11.3.ia64.rpm	SHA-256: fe83db126a4b9db8807b15d06655e25a9c30ca3c514fae8227fb1bb01db07104
bind97-utils-9.7.0-21.P2.el5_11.3.ia64.rpm	SHA-256: c3ee29ec8136491323b4bb056d0b3d6601023870750335e94feb2e92cec796e1
i386
bind97-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: d376e75247aa00702d20e2d20f696e24fbd17d2008da33272ae81eb96c1c70af
bind97-chroot-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: 33293e4e81f17106d302670ead457af4f8568e9fa4634c0037d4f4584706857c
bind97-debuginfo-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: 8a363ab917a26b060f1bf422c407ca6fde60107c84a119345733d87218460a44
bind97-devel-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: d892409de8346c84329843a858c744a198369ecbb87c9e5feec73cc47fbd89b3
bind97-libs-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: f6c4dedbdf6035f92532f9c5c45e80c3f278467d8cc38370b9c7fdd73e06d4ab
bind97-utils-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: c8e943ef35abc388bd6f9ba4f42232956fe56f5d672410cb462479e48da77720

Red Hat Enterprise Linux Workstation 5

SRPM
bind97-9.7.0-21.P2.el5_11.3.src.rpm	SHA-256: 0a6636d991b1d4da63a8d4940cfc074c19af3fe7b502019fb4adbb0f9ac130c2
x86_64
bind97-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: 5064a2c5b7b2d2f8a3ac238e288b34a8f7b94984eb992e39e479cfe6e508169d
bind97-chroot-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: d25606ea4df8638732bf6b557ce7edccb6a9c7c973bdacdec1a3749e1c46d410
bind97-debuginfo-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: 8a363ab917a26b060f1bf422c407ca6fde60107c84a119345733d87218460a44
bind97-debuginfo-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: 58b8862d9dbcafcf2322613e881a09cd77905350e5f0212daf063ac3e706ea91
bind97-devel-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: d892409de8346c84329843a858c744a198369ecbb87c9e5feec73cc47fbd89b3
bind97-devel-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: 55c0d6b01f4bdd21dffbb07bff0a40f0db7182fb2c86300924d62ff6cb8a89f0
bind97-libs-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: f6c4dedbdf6035f92532f9c5c45e80c3f278467d8cc38370b9c7fdd73e06d4ab
bind97-libs-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: d5ddfcbf3a7e6137ca79b219d45b3c1aac8679447af785a913ae1e623334fa3f
bind97-utils-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: a08c3f3c468b5cdb889892161449a7bd249f7ce1b7ed130c008bcae5f4837d10
i386
bind97-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: d376e75247aa00702d20e2d20f696e24fbd17d2008da33272ae81eb96c1c70af
bind97-chroot-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: 33293e4e81f17106d302670ead457af4f8568e9fa4634c0037d4f4584706857c
bind97-debuginfo-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: 8a363ab917a26b060f1bf422c407ca6fde60107c84a119345733d87218460a44
bind97-devel-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: d892409de8346c84329843a858c744a198369ecbb87c9e5feec73cc47fbd89b3
bind97-libs-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: f6c4dedbdf6035f92532f9c5c45e80c3f278467d8cc38370b9c7fdd73e06d4ab
bind97-utils-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: c8e943ef35abc388bd6f9ba4f42232956fe56f5d672410cb462479e48da77720

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
bind97-9.7.0-21.P2.el5_11.3.src.rpm	SHA-256: 0a6636d991b1d4da63a8d4940cfc074c19af3fe7b502019fb4adbb0f9ac130c2
s390x
bind97-9.7.0-21.P2.el5_11.3.s390x.rpm	SHA-256: efe695d726f5b386c8a971a16de9795bfeb442d7b24901f9fd2615abc1a41d68
bind97-chroot-9.7.0-21.P2.el5_11.3.s390x.rpm	SHA-256: 001b75cb4c8c41c92ce4a1a877c8355ff1de58d6af5aa076b181fbea2049d344
bind97-debuginfo-9.7.0-21.P2.el5_11.3.s390.rpm	SHA-256: cdc597e701bb6bb90495e6a7d09d99dabcf1f8ff2757038851795e2a9fed0ab1
bind97-debuginfo-9.7.0-21.P2.el5_11.3.s390x.rpm	SHA-256: f5c379ee1b12af17766c6b4f52a4d3cd56e7dd30fe4158a7f8e873b81999566f
bind97-devel-9.7.0-21.P2.el5_11.3.s390.rpm	SHA-256: 68b76f304e0177d5f0ff5b4bc86a83d1934babf075185d782f29ac69e0760a22
bind97-devel-9.7.0-21.P2.el5_11.3.s390x.rpm	SHA-256: 18baa7934be29d808423fc6bfcaf5507255bf7b6be14a15d5b0ba1d25117b739
bind97-libs-9.7.0-21.P2.el5_11.3.s390.rpm	SHA-256: 1b3f9d4ec3888323494e58f6f8a14a29261050b732b7d1f0e28ef5109df5fa6a
bind97-libs-9.7.0-21.P2.el5_11.3.s390x.rpm	SHA-256: e6f774fa0fa174512f14d3bd1d5a50549e80ca0a452e26ebbd36327bac30809b
bind97-utils-9.7.0-21.P2.el5_11.3.s390x.rpm	SHA-256: 24ebd21086c428cc6c043fea491442ddab7fddf0a2160dfa49ded547f7814444

Red Hat Enterprise Linux for Power, big endian 5

SRPM
bind97-9.7.0-21.P2.el5_11.3.src.rpm	SHA-256: 0a6636d991b1d4da63a8d4940cfc074c19af3fe7b502019fb4adbb0f9ac130c2
ppc
bind97-9.7.0-21.P2.el5_11.3.ppc.rpm	SHA-256: 9744f8f83a002a5e487b19cdb62e0ec771e07ca2202c0f38e623bd60806d19e9
bind97-chroot-9.7.0-21.P2.el5_11.3.ppc.rpm	SHA-256: 3f0ba0cf3487265f745cefd1638462454481a722e5b9bbf4965d6314dc9ea5ea
bind97-debuginfo-9.7.0-21.P2.el5_11.3.ppc.rpm	SHA-256: de13479e5d4a4a2b38ec70256a841ada4a9f132272eded3521a23e4829a854b2
bind97-debuginfo-9.7.0-21.P2.el5_11.3.ppc64.rpm	SHA-256: 8d8b3325c121649d3493a4cf72c1dd0ebba43630585b801920b6db1eeaf187ae
bind97-devel-9.7.0-21.P2.el5_11.3.ppc.rpm	SHA-256: e7793a45b023de663702cb394673db2d8c2a62c24e25608a5726a9924af5f097
bind97-devel-9.7.0-21.P2.el5_11.3.ppc64.rpm	SHA-256: 18309950ea77ce21dd0d4f7295a2ff5f87a72d288563325c5d161b3831e56922
bind97-libs-9.7.0-21.P2.el5_11.3.ppc.rpm	SHA-256: 500ea0c284e9e7bb3600c3532deb752283b44714686130b75dbe6100e15ca0f5
bind97-libs-9.7.0-21.P2.el5_11.3.ppc64.rpm	SHA-256: 4032aef8542b6ce6acecf6b2544db45306aaa9bc3c737c2c5ec3849c30d8cdae
bind97-utils-9.7.0-21.P2.el5_11.3.ppc.rpm	SHA-256: caedd86bc5bd8ae37ce570d15d796545fc6c46b48c02adbb556a4df135d769f2

Red Hat Enterprise Linux Server from RHUI 5

SRPM
bind97-9.7.0-21.P2.el5_11.3.src.rpm	SHA-256: 0a6636d991b1d4da63a8d4940cfc074c19af3fe7b502019fb4adbb0f9ac130c2
x86_64
bind97-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: 5064a2c5b7b2d2f8a3ac238e288b34a8f7b94984eb992e39e479cfe6e508169d
bind97-chroot-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: d25606ea4df8638732bf6b557ce7edccb6a9c7c973bdacdec1a3749e1c46d410
bind97-debuginfo-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: 8a363ab917a26b060f1bf422c407ca6fde60107c84a119345733d87218460a44
bind97-debuginfo-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: 58b8862d9dbcafcf2322613e881a09cd77905350e5f0212daf063ac3e706ea91
bind97-devel-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: d892409de8346c84329843a858c744a198369ecbb87c9e5feec73cc47fbd89b3
bind97-devel-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: 55c0d6b01f4bdd21dffbb07bff0a40f0db7182fb2c86300924d62ff6cb8a89f0
bind97-libs-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: f6c4dedbdf6035f92532f9c5c45e80c3f278467d8cc38370b9c7fdd73e06d4ab
bind97-libs-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: d5ddfcbf3a7e6137ca79b219d45b3c1aac8679447af785a913ae1e623334fa3f
bind97-utils-9.7.0-21.P2.el5_11.3.x86_64.rpm	SHA-256: a08c3f3c468b5cdb889892161449a7bd249f7ce1b7ed130c008bcae5f4837d10
i386
bind97-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: d376e75247aa00702d20e2d20f696e24fbd17d2008da33272ae81eb96c1c70af
bind97-chroot-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: 33293e4e81f17106d302670ead457af4f8568e9fa4634c0037d4f4584706857c
bind97-debuginfo-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: 8a363ab917a26b060f1bf422c407ca6fde60107c84a119345733d87218460a44
bind97-devel-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: d892409de8346c84329843a858c744a198369ecbb87c9e5feec73cc47fbd89b3
bind97-libs-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: f6c4dedbdf6035f92532f9c5c45e80c3f278467d8cc38370b9c7fdd73e06d4ab
bind97-utils-9.7.0-21.P2.el5_11.3.i386.rpm	SHA-256: c8e943ef35abc388bd6f9ba4f42232956fe56f5d672410cb462479e48da77720