Red Hat Security Advisory

RHSA-2015:2655

bind security update

Released 2015-12-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-29.el7_2.1, bind-libs-32:9.9.4-29.el7_2.1, bind-libs-lite-32:9.9.4-29.el7_2.1 +2
Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-29.el7_2.1, bind-chroot-32:9.9.4-29.el7_2.1, bind-devel-32:9.9.4-29.el7_2.1 +7
Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-29.el7_2.1, bind-libs-32:9.9.4-29.el7_2.1, bind-libs-lite-32:9.9.4-29.el7_2.1 +2
Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-29.el7_2.1, bind-chroot-32:9.9.4-29.el7_2.1, bind-devel-32:9.9.4-29.el7_2.1 +7
Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.5, bind-libs-32:9.8.2-0.37.rc1.el6_7.5, bind-utils-32:9.8.2-0.37.rc1.el6_7.5
Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.5, bind-chroot-32:9.8.2-0.37.rc1.el6_7.5, bind-devel-32:9.8.2-0.37.rc1.el6_7.5 +1
Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.5, bind-libs-32:9.8.2-0.37.rc1.el6_7.5, bind-utils-32:9.8.2-0.37.rc1.el6_7.5
Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.5, bind-chroot-32:9.8.2-0.37.rc1.el6_7.5, bind-devel-32:9.8.2-0.37.rc1.el6_7.5 +1
Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.5, bind-chroot-32:9.8.2-0.37.rc1.el6_7.5, bind-libs-32:9.8.2-0.37.rc1.el6_7.5 +2
Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-29.el7_2.1, bind-chroot-32:9.9.4-29.el7_2.1, bind-libs-32:9.9.4-29.el7_2.1 +8
Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.37.rc1.el6_7.5, bind-devel-32:9.8.2-0.37.rc1.el6_7.5.ppc, bind-sdb-32:9.8.2-0.37.rc1.el6_7.5
Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-29.el7_2.1, bind-devel-32:9.9.4-29.el7_2.1.ppc, bind-lite-devel-32:9.9.4-29.el7_2.1 +9
Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.5, bind-chroot-32:9.8.2-0.37.rc1.el6_7.5, bind-libs-32:9.8.2-0.37.rc1.el6_7.5 +1
Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-29.el7_2.1, bind-chroot-32:9.9.4-29.el7_2.1, bind-libs-32:9.9.4-29.el7_2.1 +6
Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.37.rc1.el6_7.5, bind-sdb-32:9.8.2-0.37.rc1.el6_7.5
Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-29.el7_2.1, bind-lite-devel-32:9.9.4-29.el7_2.1, bind-pkcs11-devel-32:9.9.4-29.el7_2.1 +2

Fixes 1 record

TI-2015-06650 CVE-2015-8000 · GHSA-6v2g-2pm7-w6q7

db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote…

MEDIUM 56

db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.55893 Published 2015-12-16 Partial fix CWE-20