Skip to content
OpenAdvisories
Medium ELSA-2020-1845 1 CVE

Moderate: bind security, bug fix, and enhancement update (Oracle Linux 8)

Published May 5, 2020 · Updated May 5, 2020

Summary

[32:9.11.13-3]
- Fix rwlock to be thread-safe (#1740511)

[32:9.11.13-2]
- Release GeoIP data on reload (#1790879)

[32:9.11.13-1]
- Update to 9.11.13

[32:9.11.12-5]
- Report failures on systemctl reload (#1739428)

[32:9.11.12-4]
- dhcp: Use monotonic time for detecting time jumps if available (#1729211)

[32:9.11.12-3]
- Backported serve-stale feature (#1664863)

[32:9.11.12-2]
- Add GeoLite2 support (#1564443)
- Add GeoIP to bind-chroot (#1497646)
- Fix wrong default GeoIP directory (#1768258)

[32:9.11.12-1]
- Update to 9.11.12 (#1557762)

[32:9.11.11-1]
- Update to 9.11.11

[32:9.11.10-1]
- Update to 9.11.10
- Share pkcs11-utils and dnssec-utils manuals instead of recommend

[32:9.11.7-1]
- Update to 9.11.7

Fixed packages 17

ReleasePackageFixed in
Oracle Linux · 8 bind 32:9.11.13-3.el8
Oracle Linux · 8 bind-chroot 32:9.11.13-3.el8
Oracle Linux · 8 bind-devel 32:9.11.13-3.el8
Oracle Linux · 8 bind-export-devel 32:9.11.13-3.el8
Oracle Linux · 8 bind-export-libs 32:9.11.13-3.el8
Oracle Linux · 8 bind-libs 32:9.11.13-3.el8
Oracle Linux · 8 bind-libs-lite 32:9.11.13-3.el8
Oracle Linux · 8 bind-license 32:9.11.13-3.el8
Oracle Linux · 8 bind-lite-devel 32:9.11.13-3.el8
Oracle Linux · 8 bind-pkcs11 32:9.11.13-3.el8
Oracle Linux · 8 bind-pkcs11-devel 32:9.11.13-3.el8
Oracle Linux · 8 bind-pkcs11-libs 32:9.11.13-3.el8
Oracle Linux · 8 bind-pkcs11-utils 32:9.11.13-3.el8
Oracle Linux · 8 bind-sdb 32:9.11.13-3.el8
Oracle Linux · 8 bind-sdb-chroot 32:9.11.13-3.el8
Oracle Linux · 8 bind-utils 32:9.11.13-3.el8
Oracle Linux · 8 python3-bind 32:9.11.13-3.el8

Vulnerabilities 1

  • High 7.5

    TCP-pipelined queries can bypass tcp-clients limit

    With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than t…