Skip to content
OpenAdvisories
High ELSA-2016-1944 1 CVE

Important: bind security update (Oracle Linux 7)

Published Sep 28, 2016 · Updated Sep 28, 2016

Summary

[30:9.3.6-25.P1.9]
- Fix CVE-2016-2776

[30:9.3.6-25.P1.8]
- Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite

[30:9.3.6-25.P1.7]
- Fix CVE-2016-1285 and CVE-2016-1286

[30:9.3.6-25.P1.6]
- Fix CVE-2015-8704

[30:9.3.6-25.P1.5]
- Fix CVE-2015-8000

[30:9.3.6-25.P1.4]
- Fix CVE-2015-5722

[30:9.3.6-25.P1.3]
- Fix CVE-2015-5477

[30:9.3.6-25.P1.2]
- Remove files backup after patching (Related: #1171971)

[30:9.3.6-25.P1.1]
- Fix CVE-2014-8500 (#1171971)

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-chroot 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-devel 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-libbind-devel 30:9.3.6-25.P1.el5_11.9
Oracle Linux · 7 bind-libs 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-libs-lite 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-license 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-lite-devel 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-pkcs11 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-pkcs11-devel 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-pkcs11-libs 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-pkcs11-utils 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-sdb 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-sdb-chroot 32:9.9.4-29.el7_2.4
Oracle Linux · 7 bind-utils 32:9.9.4-29.el7_2.4
Oracle Linux · 7 caching-nameserver 30:9.3.6-25.P1.el5_11.9

Vulnerabilities 1

  • Unscored —
    CVE-2016-2776 Public exploit EPSS 89%

    buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly…