SUSE-SU-2012:1333-1: critical: Security update for bind

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for bind
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:1333-1
Rating:             critical
References:         #780157 
Cross-References:   CVE-2012-4244
Affected Products:
                    SUSE Linux Enterprise Server 10 SP3 LTSS
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:


   This update fixes a bug where specially-crafted RRs could
   have caused a  Denial of Service (Application crash) in
   named. CVE-2012-4244 was assigned  to this issue.

   Security Issue reference:

   * CVE-2012-4244
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4244
   >



Package List:

   - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64):

      bind-9.3.4-1.40.1
      bind-chrootenv-9.3.4-1.40.1
      bind-devel-9.3.4-1.40.1
      bind-doc-9.3.4-1.40.1
      bind-libs-9.3.4-1.40.1
      bind-utils-9.3.4-1.40.1

   - SUSE Linux Enterprise Server 10 SP3 LTSS (s390x x86_64):

      bind-libs-32bit-9.3.4-1.40.1


References:

   http://support.novell.com/security/cve/CVE-2012-4244.html
   https://bugzilla.novell.com/780157
   http://download.novell.com/patch/finder/?keywords=5798d03a4e2045a2e1ed416f1e06f583