SCIENTIFIC-LINUX-ERRATA Archives

April 2017

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Important: bind on SL7.x x86_64
From:
Pat Riehecky <[log in to unmask]>
Reply To:
[log in to unmask]
Date:
Wed, 19 Apr 2017 13:59:07 -0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (48 lines) 
Synopsis:          Important: bind security update
Advisory ID:       SLSA-2017:1095-1
Issue Date:        2017-04-19
CVE Numbers:       CVE-2017-3136
                   CVE-2017-3137
--

Security Fix(es):

* A denial of service flaw was found in the way BIND handled a query
response containing CNAME or DNAME resource records in an unusual order. A
remote attacker could use this flaw to make named exit unexpectedly with
an assertion failure via a specially crafted DNS response. (CVE-2017-3137)

* A denial of service flaw was found in the way BIND handled query
requests when using DNS64 with "break-dnssec yes" option. A remote
attacker could use this flaw to make named exit unexpectedly with an
assertion failure via a specially crafted DNS request. (CVE-2017-3136)
--

SL7
  x86_64
    bind-debuginfo-9.9.4-38.el7_3.3.i686.rpm
    bind-debuginfo-9.9.4-38.el7_3.3.x86_64.rpm
    bind-libs-9.9.4-38.el7_3.3.i686.rpm
    bind-libs-9.9.4-38.el7_3.3.x86_64.rpm
    bind-libs-lite-9.9.4-38.el7_3.3.i686.rpm
    bind-libs-lite-9.9.4-38.el7_3.3.x86_64.rpm
    bind-utils-9.9.4-38.el7_3.3.x86_64.rpm
    bind-9.9.4-38.el7_3.3.x86_64.rpm
    bind-chroot-9.9.4-38.el7_3.3.x86_64.rpm
    bind-devel-9.9.4-38.el7_3.3.i686.rpm
    bind-devel-9.9.4-38.el7_3.3.x86_64.rpm
    bind-lite-devel-9.9.4-38.el7_3.3.i686.rpm
    bind-lite-devel-9.9.4-38.el7_3.3.x86_64.rpm
    bind-pkcs11-9.9.4-38.el7_3.3.x86_64.rpm
    bind-pkcs11-devel-9.9.4-38.el7_3.3.i686.rpm
    bind-pkcs11-devel-9.9.4-38.el7_3.3.x86_64.rpm
    bind-pkcs11-libs-9.9.4-38.el7_3.3.i686.rpm
    bind-pkcs11-libs-9.9.4-38.el7_3.3.x86_64.rpm
    bind-pkcs11-utils-9.9.4-38.el7_3.3.x86_64.rpm
    bind-sdb-9.9.4-38.el7_3.3.x86_64.rpm
    bind-sdb-chroot-9.9.4-38.el7_3.3.x86_64.rpm
  noarch
    bind-license-9.9.4-38.el7_3.3.noarch.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2