bind-9.7.3-8.P3.AXS4.2

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.
Security issues fixed with this release:
CVE-2011-4313
query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver.
Fixed bugs:
- Because of incorrect handling of errors arising on automatic updates of DNSSEC trust anchors, the named daemon could become unresonsive on shutdown. This has been fixed.
- A race condition sometimes happened on validating DNSSEC-signed NXDOMAIN responses, resulting in the named daemon terminating unexpectedly. THis has been fixed.
- On PowerPC architectures (32- and 64-bits), the mutli-threaded named daemon could become unresponsive due to a malfunction with its atomic operations feature. This has been fixed.