[security bulletin] HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service
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