OracleVM 3.3 / 3.4 : bind (OVMSA-2016-0136)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-2776 - Updated named.ca hints file to the latest version 1267991 - Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used 1227189 - Added the fixed tarball wit...

HackerOne: Missing Certificate Authority Authorization rule

Certificate Authority Authorization supported by LetsEncrypt and other CAs allows a domain owner to specify which Certificate Authorities should be allowed to issue certificates for the domain. All CAA-compliant certificate authorities should refuse to issue a certificate unless they are the CA o...