Oval Definition:	oval:com.redhat.rhsa:def:20140043
Revision Date: 2014-01-20 Version: 636 Title: RHSA-2014:0043: bind security update (Moderate) Description: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A denial of service flaw was found in the way BIND handled queries for NSEC3-signed zones. A remote attacker could use this flaw against an authoritative name server that served NCES3-signed zones by sending a specially crafted query, which, when processed, would cause named to crash. (CVE-2014-0591) All bind users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically. Family: unix Class: patch Status: Reference(s): CVE-2014-0591 CVE-2014-0591 RHSA-2014:0043 RHSA-2014:0043-00 RHSA-2014:0043-01 Platform(s): Red Hat Enterprise Linux 6 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 6 is installed AND bind is earlier than 32:9.8.2-0.23.rc1.el6_5.1 AND bind is signed with Red Hat redhatrelease2 key bind-chroot is earlier than 32:9.8.2-0.23.rc1.el6_5.1 AND bind-chroot is signed with Red Hat redhatrelease2 key bind-devel is earlier than 32:9.8.2-0.23.rc1.el6_5.1 AND bind-devel is signed with Red Hat redhatrelease2 key bind-libs is earlier than 32:9.8.2-0.23.rc1.el6_5.1 AND bind-libs is signed with Red Hat redhatrelease2 key bind-sdb is earlier than 32:9.8.2-0.23.rc1.el6_5.1 AND bind-sdb is signed with Red Hat redhatrelease2 key bind-utils is earlier than 32:9.8.2-0.23.rc1.el6_5.1 AND bind-utils is signed with Red Hat redhatrelease2 key
BACK