Summary
[32:9.11.4-26.P2]
- Permit explicit disabling of RSAMD5 in FIPS mode (#1737407)
[32:9.11.4-25.P2]
- Fix CVE-2018-5745
- Fix CVE-2019-6465
[32:9.11.4-24.P2]
- Do not override random numbers provider in DHCP (#1668682)
[32:9.11.4-23.P2]
- Report errors on invalid IDN 2008 names (#1679307)
[32:9.11.4-22.P2]
- Fix CVE-2019-6471
[32:9.11.4-21.P2]
- Fix random generator initialization
[32:9.11.4-20.P2]
- Fix multilib conflict of devel packages (#1666785)
[32:9.11.4-19.P2]
- Add support for OpenSSL provided random data
- Disable often failing unit test random_test
- Add /dev/urandom to chroot
[32:9.11.4-18.P2]
- Fix zone2ldap tool memory management (#1602451)
- Add support for OpenSSL provided random data
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bind | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-chroot | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-devel | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-export-devel | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-export-libs | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-libs | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-libs-lite | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-license | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-lite-devel | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-pkcs11 | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-pkcs11-devel | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-pkcs11-libs | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-pkcs11-utils | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-sdb | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-sdb-chroot | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | bind-utils | 32:9.11.4-26.P2.el8 |
| Oracle Linux · 8 | python3-bind | 32:9.11.4-26.P2.el8 |
Vulnerabilities 2
-
Medium 5.3
Zone transfer controls for writable DLZ zones were not effective
Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported…
-
Medium 4.9
An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys
"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses m…