Red Hat Security AdvisoryRHSA-2016:0459
bind security update
Released 2016-03-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.6-25.P1.el5_11.8, bind-30:9.3.6-25.P1.el5_11.8.i386, bind-30:9.3.6-25.P1.el5_11.8.ia64 +29
- Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-29.el7_2.3, bind-libs-32:9.9.4-29.el7_2.3, bind-libs-lite-32:9.9.4-29.el7_2.3 +2
- Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-29.el7_2.3, bind-chroot-32:9.9.4-29.el7_2.3, bind-devel-32:9.9.4-29.el7_2.3 +7
- Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-29.el7_2.3, bind-libs-32:9.9.4-29.el7_2.3, bind-libs-lite-32:9.9.4-29.el7_2.3 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-29.el7_2.3, bind-chroot-32:9.9.4-29.el7_2.3, bind-devel-32:9.9.4-29.el7_2.3 +7
- Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.6-25.P1.el5_11.8, bind-30:9.3.6-25.P1.el5_11.8.i386, bind-libs-30:9.3.6-25.P1.el5_11.8 +5
- Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.7, bind-libs-32:9.8.2-0.37.rc1.el6_7.7, bind-utils-32:9.8.2-0.37.rc1.el6_7.7
- Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.7, bind-chroot-32:9.8.2-0.37.rc1.el6_7.7, bind-devel-32:9.8.2-0.37.rc1.el6_7.7 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind-30:9.3.6-25.P1.el5_11.8, bind-chroot-30:9.3.6-25.P1.el5_11.8, bind-chroot-30:9.3.6-25.P1.el5_11.8.i386 +6
- Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.7, bind-libs-32:9.8.2-0.37.rc1.el6_7.7, bind-utils-32:9.8.2-0.37.rc1.el6_7.7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.7, bind-chroot-32:9.8.2-0.37.rc1.el6_7.7, bind-devel-32:9.8.2-0.37.rc1.el6_7.7 +1
- Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.7, bind-chroot-32:9.8.2-0.37.rc1.el6_7.7, bind-libs-32:9.8.2-0.37.rc1.el6_7.7 +2
- Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-29.el7_2.3, bind-chroot-32:9.9.4-29.el7_2.3, bind-libs-32:9.9.4-29.el7_2.3 +8
- Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.37.rc1.el6_7.7, bind-devel-32:9.8.2-0.37.rc1.el6_7.7.ppc, bind-sdb-32:9.8.2-0.37.rc1.el6_7.7
- Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-29.el7_2.3, bind-devel-32:9.9.4-29.el7_2.3.ppc, bind-lite-devel-32:9.9.4-29.el7_2.3 +9
- Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.37.rc1.el6_7.7, bind-chroot-32:9.8.2-0.37.rc1.el6_7.7, bind-libs-32:9.8.2-0.37.rc1.el6_7.7 +1
- Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-29.el7_2.3, bind-chroot-32:9.9.4-29.el7_2.3, bind-libs-32:9.9.4-29.el7_2.3 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.37.rc1.el6_7.7, bind-sdb-32:9.8.2-0.37.rc1.el6_7.7
- Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-29.el7_2.3, bind-lite-devel-32:9.9.4-29.el7_2.3, bind-pkcs11-devel-32:9.9.4-29.el7_2.3 +2
Fixes 2 records
Priority HIGH 72
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.60837 · Published 2016-03-09 · Partial fix
Priority MEDIUM 64
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure an…
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.57828 · Published 2016-03-09 · Partial fix
