Skip to content
OpenAdvisories
High ELSA-2014-1984 1 CVE

Important: bind security update (Oracle Linux 7)

Published Dec 12, 2014 · Updated Dec 12, 2014

Summary

[32:9.9.4-14.0.1.el7_0.1]
- Rebuild to fix libmysqlclient dependency

[32:9.9.4-14.1]
- Fix CVE-2014-8500 (#1171975)

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.9.4-14.0.1.el7_0.1
Oracle Linux · 7 bind-chroot 32:9.9.4-14.0.1.el7_0.1
Oracle Linux · 7 bind-devel 32:9.9.4-14.0.1.el7_0.1
Oracle Linux · 7 bind-libbind-devel 30:9.3.6-25.P1.el5_11.2
Oracle Linux · 7 bind-libs 32:9.9.4-14.0.1.el7_0.1
Oracle Linux · 7 bind-libs-lite 32:9.9.4-14.0.1.el7_0.1
Oracle Linux · 7 bind-license 32:9.9.4-14.0.1.el7_0.1
Oracle Linux · 7 bind-lite-devel 32:9.9.4-14.0.1.el7_0.1
Oracle Linux · 7 bind-sdb 32:9.9.4-14.0.1.el7_0.1
Oracle Linux · 7 bind-sdb-chroot 32:9.9.4-14.0.1.el7_0.1
Oracle Linux · 7 bind-utils 32:9.9.4-14.0.1.el7_0.1
Oracle Linux · 7 caching-nameserver 30:9.3.6-25.P1.el5_11.2

Vulnerabilities 1

  • Unscored —
    CVE-2014-8500 EPSS 59%

    ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which …