Summary
[32:9.9.4-50.1]
- Bump again above RHEL-7.4
[32:9.9.4-38.5]
- Fix CVE-2017-3142 and CVE-2017-3143
[32:9.9.4-38.4]
- Update root servers and trust anchor (#1459649)
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | bind | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-chroot | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-devel | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-libs | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-libs-lite | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-license | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-lite-devel | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-pkcs11 | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-pkcs11-devel | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-pkcs11-libs | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-pkcs11-utils | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-sdb | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-sdb-chroot | 32:9.9.4-50.el7_3.1 |
| Oracle Linux · 7 | bind-utils | 32:9.9.4-50.el7_3.1 |
Vulnerabilities 2
-
High 7.5
An error in TSIG authentication can permit unauthorized dynamic updates
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BI…
-
Medium 5.3
An error in TSIG authentication can permit unauthorized zone transfers
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies …