Red Hat Security Advisory

RHSA-2007:0740

bind security update

Released 2007-07-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Desktop version 3 bind-20:9.2.4-21.el3, bind-20:9.2.4-21.el3.i386, bind-chroot-20:9.2.4-21.el3 +7
Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.3-9.0.1.el5, bind-30:9.3.3-9.0.1.el5.i386, bind-30:9.3.3-9.0.1.el5.ia64 +29
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 bind-9.2.1-9.el2, bind-9.2.1-9.el2.i386, bind-9.2.1-9.el2.ia64 +4
Red Hat Enterprise Linux AS version 3 bind-20:9.2.4-21.el3, bind-20:9.2.4-21.el3.i386, bind-20:9.2.4-21.el3.ia64 +17
Red Hat Enterprise Linux AS version 4 bind-20:9.2.4-27.0.1.el4, bind-20:9.2.4-27.0.1.el4.i386, bind-20:9.2.4-27.0.1.el4.ia64 +17
Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.3-9.0.1.el5, bind-30:9.3.3-9.0.1.el5.i386, bind-libs-30:9.3.3-9.0.1.el5 +5
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind-30:9.3.3-9.0.1.el5, bind-chroot-30:9.3.3-9.0.1.el5, bind-chroot-30:9.3.3-9.0.1.el5.i386 +6
Red Hat Enterprise Linux Desktop version 4 bind-20:9.2.4-27.0.1.el4, bind-20:9.2.4-27.0.1.el4.i386, bind-chroot-20:9.2.4-27.0.1.el4 +7
Red Hat Enterprise Linux ES version 2.1 bind-9.2.1-9.el2, bind-9.2.1-9.el2.i386, bind-devel-9.2.1-9.el2.i386 +1
Red Hat Enterprise Linux ES version 3 bind-20:9.2.4-21.el3, bind-20:9.2.4-21.el3.i386, bind-20:9.2.4-21.el3.ia64 +12
Red Hat Enterprise Linux ES version 4 bind-20:9.2.4-27.0.1.el4, bind-20:9.2.4-27.0.1.el4.i386, bind-20:9.2.4-27.0.1.el4.ia64 +12
Red Hat Enterprise Linux WS version 2.1 bind-9.2.1-9.el2, bind-9.2.1-9.el2.i386, bind-devel-9.2.1-9.el2.i386 +1
Red Hat Enterprise Linux WS version 3 bind-20:9.2.4-21.el3, bind-20:9.2.4-21.el3.i386, bind-20:9.2.4-21.el3.ia64 +12
Red Hat Enterprise Linux WS version 4 bind-20:9.2.4-27.0.1.el4, bind-20:9.2.4-27.0.1.el4.i386, bind-20:9.2.4-27.0.1.el4.ia64 +12
Red Hat Linux Advanced Workstation 2.1 bind-9.2.1-9.el2, bind-9.2.1-9.el2.ia64, bind-devel-9.2.1-9.el2.ia64 +1

Fixes 1 record

TI-2007-02832 CVE-2007-2926 · GHSA-f6h8-pjrf-562j

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS…

LOW 35

ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attac…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.1309 Published 2007-07-24 Fixed