Grant, can you check to see if we are affected by CVE-2014-0591? On Mon, Oct 13, 2014 at 03:42:27PM +0000, Bonnie King wrote: > Synopsis: Moderate: bind97 security and bug fix update > Advisory ID: SLSA-2014:1244-1 > Issue Date: 2014-09-16 > CVE Numbers: CVE-2014-0591 > -- > > A denial of service flaw was found in the way BIND handled queries for > NSEC3-signed zones. A remote attacker could use this flaw against an > authoritative name server that served NCES3-signed zones by sending a > specially crafted query, which, when processed, would cause named to > crash. (CVE-2014-0591) > > Note: The CVE-2014-0591 issue does not directly affect the version of > bind97 shipped in Scientific Linux 5. This issue is being addressed > however to assure it is not introduced in future builds of bind97 > (possibly built with a different compiler or C library optimization). > > This update also fixes the following bug: > > * Previously, the bind97 initscript did not check for the existence of the > ROOTDIR variable when shutting down the named daemon. As a consequence, > some parts of the file system that are mounted when using bind97 in a > chroot environment were unmounted on daemon shut down, even if bind97 was > not running in a chroot environment. With this update, the initscript has > been fixed to check for the existence of the ROOTDIR variable when > unmounting some parts of the file system on named daemon shut down. Now, > when shutting down bind97 that is not running in a chroot environment, no > parts of the file system are unmounted. > > After installing the update, the BIND daemon (named) will be restarted > automatically. > -- > > SL5 > x86_64 > bind97-9.7.0-21.P2.el5.x86_64.rpm > bind97-chroot-9.7.0-21.P2.el5.x86_64.rpm > bind97-debuginfo-9.7.0-21.P2.el5.i386.rpm > bind97-debuginfo-9.7.0-21.P2.el5.x86_64.rpm > bind97-devel-9.7.0-21.P2.el5.i386.rpm > bind97-devel-9.7.0-21.P2.el5.x86_64.rpm > bind97-libs-9.7.0-21.P2.el5.i386.rpm > bind97-libs-9.7.0-21.P2.el5.x86_64.rpm > bind97-utils-9.7.0-21.P2.el5.x86_64.rpm > i386 > bind97-9.7.0-21.P2.el5.i386.rpm > bind97-chroot-9.7.0-21.P2.el5.i386.rpm > bind97-debuginfo-9.7.0-21.P2.el5.i386.rpm > bind97-devel-9.7.0-21.P2.el5.i386.rpm > bind97-libs-9.7.0-21.P2.el5.i386.rpm > bind97-utils-9.7.0-21.P2.el5.i386.rpm > > - Scientific Linux Development Team >
-- Kelsey Cummings - [email protected] Sonic.Net, Inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407
