Skip to content
OpenAdvisories
Medium ALAS2-2019-1170 1 CVE

Moderate: bind security update (Amazon Linux 2)

Published Mar 7, 2019 · Updated Mar 8, 2019

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5742: 1655844: CVE-2018-5742 bind: Crash from assertion error when debug log level is 10 and log entries meet buffer boundary

Fixed packages 15

ReleasePackageFixed in
Amazon Linux · 2 bind 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-chroot 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-debuginfo 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-devel 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-libs 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-libs-lite 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-license 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-lite-devel 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-pkcs11 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-pkcs11-devel 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-pkcs11-libs 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-pkcs11-utils 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-sdb 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-sdb-chroot 32:9.9.4-73.amzn2.1.1
Amazon Linux · 2 bind-utils 32:9.9.4-73.amzn2.1.1

Vulnerabilities 1

  • Medium 5.9
    CVE-2018-5742

    An oversight while backporting a feature leads to an assertion failure in buffer.c:420

    While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distribu…

    Red Hat BIND9

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-5742.html