Skip to content
OpenAdvisories
High ELSA-2016-0459 2 CVEs

Important: bind security update (Oracle Linux 7)

Published Mar 16, 2016 · Updated Mar 16, 2016

Ecosystem: Oracle Linux

Summary

[30:9.3.6-25.P1.8]
- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite

[30:9.3.6-25.P1.7]
- Fix CVE-2016-1285 and CVE-2016-1286

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-chroot 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-devel 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-libbind-devel 30:9.3.6-25.P1.el5_11.8
Oracle Linux · 7 bind-libs 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-libs-lite 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-license 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-lite-devel 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-pkcs11 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-pkcs11-devel 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-pkcs11-libs 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-pkcs11-utils 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-sdb 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-sdb-chroot 32:9.9.4-29.el7_2.3
Oracle Linux · 7 bind-utils 32:9.9.4-29.el7_2.3
Oracle Linux · 7 caching-nameserver 30:9.3.6-25.P1.el5_11.8

Vulnerabilities 2

  • Unscored —
    CVE-2016-1285 EPSS 58%

    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing f…

    bind9 bind9 Debian Ubuntu
  • Unscored —
    CVE-2016-1286 EPSS 61%

    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service …

    bind9 bind9 Debian Ubuntu