Red Hat Security Advisory

RHSA-2018:0487

bind security update

Released 2018-03-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux HPC Node EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.12, bind-libs-32:9.8.2-0.37.rc1.el6_7.12, bind-utils-32:9.8.2-0.37.rc1.el6_7.12
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.12, bind-chroot-32:9.8.2-0.37.rc1.el6_7.12, bind-devel-32:9.8.2-0.37.rc1.el6_7.12 +1
Red Hat Enterprise Linux Server AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.13, bind-chroot-32:9.8.2-0.17.rc1.el6_4.13, bind-libs-32:9.8.2-0.17.rc1.el6_4.13 +1
Red Hat Enterprise Linux Server AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.8, bind-chroot-32:9.8.2-0.23.rc1.el6_5.8, bind-libs-32:9.8.2-0.23.rc1.el6_5.8 +1
Red Hat Enterprise Linux Server AUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.10, bind-chroot-32:9.8.2-0.30.rc1.el6_6.10, bind-libs-32:9.8.2-0.30.rc1.el6_6.10 +1
Red Hat Enterprise Linux Server EUS (v. 6.7) bind-32:9.8.2-0.37.rc1.el6_7.12, bind-chroot-32:9.8.2-0.37.rc1.el6_7.12, bind-libs-32:9.8.2-0.37.rc1.el6_7.12 +2
Red Hat Enterprise Linux Server Optional AUS (v. 6.4) bind-32:9.8.2-0.17.rc1.el6_4.13, bind-devel-32:9.8.2-0.17.rc1.el6_4.13, bind-sdb-32:9.8.2-0.17.rc1.el6_4.13
Red Hat Enterprise Linux Server Optional AUS (v. 6.5) bind-32:9.8.2-0.23.rc1.el6_5.8, bind-devel-32:9.8.2-0.23.rc1.el6_5.8, bind-sdb-32:9.8.2-0.23.rc1.el6_5.8
Red Hat Enterprise Linux Server Optional AUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.10, bind-sdb-32:9.8.2-0.30.rc1.el6_6.10
Red Hat Enterprise Linux Server Optional EUS (v. 6.7) bind-devel-32:9.8.2-0.37.rc1.el6_7.12, bind-devel-32:9.8.2-0.37.rc1.el6_7.12.ppc, bind-sdb-32:9.8.2-0.37.rc1.el6_7.12
Red Hat Enterprise Linux Server Optional TUS (v. 6.6) bind-devel-32:9.8.2-0.30.rc1.el6_6.10, bind-sdb-32:9.8.2-0.30.rc1.el6_6.10
Red Hat Enterprise Linux Server TUS (v. 6.6) bind-32:9.8.2-0.30.rc1.el6_6.10, bind-chroot-32:9.8.2-0.30.rc1.el6_6.10, bind-libs-32:9.8.2-0.30.rc1.el6_6.10 +1

Fixes 1 record

TI-2017-02365 CVE-2017-3145 · GHSA-3hx4-77f4-g7cp

Improper fetch cleanup sequencing in the resolver can cause named to crash

MEDIUM 55

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.27725 Published 2019-01-16 Partial fix CWE-416