Summary
[32:9.11.4-9.P2]
- Fix CVE-2019-6471
[32:9.11.4-8.P2]
- Fix scriptlet errors when selinux-policy is not installed (#1647659)
[32:9.11.4-7.P2]
- Fix inefective limit of TCP clients (CVE-2018-5743)
[32:9.11.4-6.P2]
- Use /sbin/nologin again (#1676661)
[32:9.11.4-5.P2]
- Make sure selinux-policy is installed soon enough (#1647659)
[32:9.11.4-4.P2]
- Disable custom random generator for export libs (#1685940)
[32:9.11.4-3.P2]
- Fix memory handling in zone2ldap tool
[32:9.11.4-2.P2]
- Move dnssec utilities back to bind package
- Remove separate python-bind package
[32:9.11.4-1.P2]
- Rebase features patches
- Disable autodetected eddsa algorithm ED448
- Add versioned depends to all library subpackages
- Fix multilib conflict of devel packages
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | bind | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-chroot | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-devel | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-export-devel | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-export-libs | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-libs | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-libs-lite | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-license | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-lite-devel | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-pkcs11 | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-pkcs11-devel | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-pkcs11-libs | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-pkcs11-utils | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-sdb | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-sdb-chroot | 32:9.11.4-9.P2.el7 |
| Oracle Linux · 7 | bind-utils | 32:9.11.4-9.P2.el7 |
Vulnerabilities 1
-
Medium 6.5
Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation
To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending…