Red Hat Security Advisory

RHSA-2016:1944

bind security update

Released 2016-09-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.6-25.P1.el5_11.9, bind-30:9.3.6-25.P1.el5_11.9.i386, bind-30:9.3.6-25.P1.el5_11.9.ia64 +29
Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-29.el7_2.4, bind-libs-32:9.9.4-29.el7_2.4, bind-libs-lite-32:9.9.4-29.el7_2.4 +2
Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-29.el7_2.4, bind-chroot-32:9.9.4-29.el7_2.4, bind-devel-32:9.9.4-29.el7_2.4 +7
Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-29.el7_2.4, bind-libs-32:9.9.4-29.el7_2.4, bind-libs-lite-32:9.9.4-29.el7_2.4 +2
Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-29.el7_2.4, bind-chroot-32:9.9.4-29.el7_2.4, bind-devel-32:9.9.4-29.el7_2.4 +7
Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.6-25.P1.el5_11.9, bind-30:9.3.6-25.P1.el5_11.9.i386, bind-libs-30:9.3.6-25.P1.el5_11.9 +5
Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-libs-32:9.8.2-0.47.rc1.el6_8.1, bind-utils-32:9.8.2-0.47.rc1.el6_8.1
Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-chroot-32:9.8.2-0.47.rc1.el6_8.1, bind-devel-32:9.8.2-0.47.rc1.el6_8.1 +1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind-30:9.3.6-25.P1.el5_11.9, bind-chroot-30:9.3.6-25.P1.el5_11.9, bind-chroot-30:9.3.6-25.P1.el5_11.9.i386 +6
Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-libs-32:9.8.2-0.47.rc1.el6_8.1, bind-utils-32:9.8.2-0.47.rc1.el6_8.1
Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-chroot-32:9.8.2-0.47.rc1.el6_8.1, bind-devel-32:9.8.2-0.47.rc1.el6_8.1 +1
Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-chroot-32:9.8.2-0.47.rc1.el6_8.1, bind-libs-32:9.8.2-0.47.rc1.el6_8.1 +2
Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-29.el7_2.4, bind-chroot-32:9.9.4-29.el7_2.4, bind-libs-32:9.9.4-29.el7_2.4 +8
Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.47.rc1.el6_8.1, bind-devel-32:9.8.2-0.47.rc1.el6_8.1.ppc, bind-sdb-32:9.8.2-0.47.rc1.el6_8.1
Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-29.el7_2.4, bind-devel-32:9.9.4-29.el7_2.4.ppc, bind-lite-devel-32:9.9.4-29.el7_2.4 +9
Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.47.rc1.el6_8.1, bind-chroot-32:9.8.2-0.47.rc1.el6_8.1, bind-libs-32:9.8.2-0.47.rc1.el6_8.1 +1
Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-29.el7_2.4, bind-chroot-32:9.9.4-29.el7_2.4, bind-libs-32:9.9.4-29.el7_2.4 +6
Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.47.rc1.el6_8.1, bind-sdb-32:9.8.2-0.47.rc1.el6_8.1
Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-29.el7_2.4, bind-lite-devel-32:9.9.4-29.el7_2.4, bind-pkcs11-devel-32:9.9.4-29.el7_2.4 +2

Fixes 1 record

TI-2016-02320 CVE-2016-2776 · GHSA-jxr9-jr43-c424

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x…

HIGH 75

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure a…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.89482 Published 2016-09-28 Partial fix CWE-20