Skip to content
OpenAdvisories
High ELSA-2019-1714 1 CVE

Important: bind security update (Oracle Linux 8)

Published Jul 30, 2019 · Updated Jul 30, 2019

Ecosystem: Oracle Linux

Summary

[32:9.11.4-17.P2.1]
- Fix CVE-2019-6471

Fixed packages 17

ReleasePackageFixed in
Oracle Linux · 8 bind 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-chroot 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-devel 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-export-devel 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-export-libs 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-libs 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-libs-lite 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-license 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-lite-devel 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-pkcs11 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-pkcs11-devel 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-pkcs11-libs 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-pkcs11-utils 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-sdb 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-sdb-chroot 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 bind-utils 32:9.11.4-17.P2.el8_0.1
Oracle Linux · 8 python3-bind 32:9.11.4-17.P2.el8_0.1

Vulnerabilities 1

  • Medium 5.9
    CVE-2019-6471

    A race condition when discarding malformed packets can cause BIND to exit with an assertion failure

    A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine