[SECURITY] Fedora 17 Update: bind-9.9.1-5.P2.fc17

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-11146
2012-07-26 21:46:19
--------------------------------------------------------------------------------

Name        : bind
Product     : Fedora 17
Version     : 9.9.1
Release     : 5.P2.fc17
URL         : http://www.isc.org/products/BIND/
Summary     : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
Description :
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

--------------------------------------------------------------------------------
Update Information:

Update to 9.9.1-P2 security release which fixes CVE-2012-3817 and CVE-2012-3868.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Jul 26 2012 Adam Tkac <atkac redhat com> 32:9.9.1-5.P2
- update to 9.9.1-P2
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 32:9.9.1-4.P1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Wed Jul 11 2012 Ville Skyttä <ville.skytta at iki.fi> - 32:9.9.1-3.P1
- Avoid shell invocation and dep for -libs-lite %postun.
* Mon Jun  4 2012 Adam Tkac <atkac redhat com> 32:9.9.1-2.P1
- update to 9.9.1-P1 (CVE-2012-1667)
* Thu May 24 2012 Adam Tkac <atkac redhat com> 32:9.9.1-1
- update to 9.9.1
- bind99-coverity.patch merged
- bind-9.5-overflow.patch merged
* Mon May  7 2012 Adam Tkac <atkac redhat com> 32:9.9.0-6
- nslookup: return non-zero exit code when fail to get answer (#816164)
* Thu Apr 26 2012 Adam Tkac <atkac redhat com> 32:9.9.0-5
- initscript: don't umount /var/named when didn't mount it
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #842897 - CVE-2012-3817 bind: heavy DNSSEC validation load can cause assertion failure
        https://bugzilla.redhat.com/show_bug.cgi?id=842897
  [ 2 ] Bug #842895 - CVE-2012-3868 bind: high TCP query load can trigger memory leak
        https://bugzilla.redhat.com/show_bug.cgi?id=842895
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update bind' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------