Red Hat Security Advisory

RHSA-2009:0020

bind security update

Released 2009-01-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Desktop version 3 bind-20:9.2.4-23.el3, bind-20:9.2.4-23.el3.i386, bind-chroot-20:9.2.4-23.el3 +7
Red Hat Enterprise Linux (v. 5 server) bind-30:9.3.4-6.0.3.P1.el5_2, bind-30:9.3.4-6.0.3.P1.el5_2.i386, bind-30:9.3.4-6.0.3.P1.el5_2.ia64 +29
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 bind-9.2.1-11.el2, bind-9.2.1-11.el2.i386, bind-9.2.1-11.el2.ia64 +4
Red Hat Enterprise Linux AS version 3 bind-20:9.2.4-23.el3, bind-20:9.2.4-23.el3.i386, bind-20:9.2.4-23.el3.ia64 +17
Red Hat Enterprise Linux AS version 4 bind-20:9.2.4-30.el4_7.1, bind-20:9.2.4-30.el4_7.1.i386, bind-20:9.2.4-30.el4_7.1.ia64 +17
Red Hat Enterprise Linux Desktop (v. 5 client) bind-30:9.3.4-6.0.3.P1.el5_2, bind-30:9.3.4-6.0.3.P1.el5_2.i386, bind-libs-30:9.3.4-6.0.3.P1.el5_2 +5
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind-30:9.3.4-6.0.3.P1.el5_2, bind-chroot-30:9.3.4-6.0.3.P1.el5_2, bind-chroot-30:9.3.4-6.0.3.P1.el5_2.i386 +6
Red Hat Enterprise Linux Desktop version 4 bind-20:9.2.4-30.el4_7.1, bind-20:9.2.4-30.el4_7.1.i386, bind-chroot-20:9.2.4-30.el4_7.1 +7
Red Hat Enterprise Linux ES version 2.1 bind-9.2.1-11.el2, bind-9.2.1-11.el2.i386, bind-devel-9.2.1-11.el2.i386 +1
Red Hat Enterprise Linux ES version 3 bind-20:9.2.4-23.el3, bind-20:9.2.4-23.el3.i386, bind-20:9.2.4-23.el3.ia64 +12
Red Hat Enterprise Linux ES version 4 bind-20:9.2.4-30.el4_7.1, bind-20:9.2.4-30.el4_7.1.i386, bind-20:9.2.4-30.el4_7.1.ia64 +12
Red Hat Enterprise Linux WS version 2.1 bind-9.2.1-11.el2, bind-9.2.1-11.el2.i386, bind-devel-9.2.1-11.el2.i386 +1
Red Hat Enterprise Linux WS version 3 bind-20:9.2.4-23.el3, bind-20:9.2.4-23.el3.i386, bind-20:9.2.4-23.el3.ia64 +12
Red Hat Enterprise Linux WS version 4 bind-20:9.2.4-30.el4_7.1, bind-20:9.2.4-30.el4_7.1.i386, bind-20:9.2.4-30.el4_7.1.ia64 +12
Red Hat Linux Advanced Workstation 2.1 bind-9.2.1-11.el2, bind-9.2.1-11.el2.ia64, bind-devel-9.2.1-11.el2.ia64 +1

Fixes 1 record

TI-2009-00025 CVE-2009-0025 · GHSA-hcwf-6ghh-6m6f

BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value…

MEDIUM 40

BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0686 Published 2009-01-07 Fixed CWE-287