Skip to content
OpenAdvisories
Medium ELSA-2016-0073 1 CVE

Moderate: bind security update (Oracle Linux 7)

Published Jan 27, 2016 · Updated Jan 27, 2016

Summary

[30:9.3.6-25.P1.6]
- Fix CVE-2015-8704

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-chroot 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-devel 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-libbind-devel 30:9.3.6-25.P1.el5_11.6
Oracle Linux · 7 bind-libs 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-libs-lite 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-license 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-lite-devel 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-pkcs11 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-pkcs11-devel 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-pkcs11-libs 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-pkcs11-utils 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-sdb 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-sdb-chroot 32:9.9.4-29.el7_2.2
Oracle Linux · 7 bind-utils 32:9.9.4-29.el7_2.2
Oracle Linux · 7 caching-nameserver 30:9.3.6-25.P1.el5_11.6

Vulnerabilities 1

  • Unscored —
    CVE-2015-8704 EPSS 21%

    apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause…