Skip to content
OpenAdvisories
Medium ELSA-2019-0194 1 CVE

Moderate: bind security update (Oracle Linux 7)

Published Jan 30, 2019 · Updated Jan 30, 2019

Ecosystem: Oracle Linux

Summary

[32:9.9.4-73]
- Fixes debug level comments (#1647539)

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-chroot 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-devel 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-libs 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-libs-lite 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-license 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-lite-devel 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-pkcs11 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-pkcs11-devel 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-pkcs11-libs 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-pkcs11-utils 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-sdb 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-sdb-chroot 32:9.9.4-73.el7_6
Oracle Linux · 7 bind-utils 32:9.9.4-73.el7_6

Vulnerabilities 1

  • Medium 5.9
    CVE-2018-5742

    An oversight while backporting a feature leads to an assertion failure in buffer.c:420

    While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distribu…

    Red Hat BIND9