Summary
[32:9.11.4-26.P2.4]
- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
[32:9.11.4-26.P2.3]
- Fix inline re-signing (#rh1889902)
[32:9.11.4-26.P2.2]
- Fix unsupported algorithms validation (#rh1769876)
[32:9.11.4-26.P2.1]
- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | bind | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-chroot | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-devel | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-export-devel | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-export-libs | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-libs | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-libs-lite | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-license | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-lite-devel | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-pkcs11 | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-pkcs11-devel | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-pkcs11-libs | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-pkcs11-utils | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-sdb | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-sdb-chroot | 32:9.11.4-26.P2.el7_9.4 |
| Oracle Linux · 7 | bind-utils | 32:9.11.4-26.P2.el7_9.4 |
Vulnerabilities 1
-
High 8.1CVE-2020-8625 EPSS 65%
A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack
BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicit…