Red Hat Security Advisory

RHSA-2018:2571

bind security update

Released 2018-08-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.1, bind-libs-32:9.8.2-0.68.rc1.el6_10.1, bind-utils-32:9.8.2-0.68.rc1.el6_10.1
Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.1, bind-chroot-32:9.8.2-0.68.rc1.el6_10.1, bind-devel-32:9.8.2-0.68.rc1.el6_10.1 +1
Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.1, bind-libs-32:9.8.2-0.68.rc1.el6_10.1, bind-utils-32:9.8.2-0.68.rc1.el6_10.1
Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.1, bind-chroot-32:9.8.2-0.68.rc1.el6_10.1, bind-devel-32:9.8.2-0.68.rc1.el6_10.1 +1
Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.1, bind-chroot-32:9.8.2-0.68.rc1.el6_10.1, bind-libs-32:9.8.2-0.68.rc1.el6_10.1 +2
Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.68.rc1.el6_10.1, bind-devel-32:9.8.2-0.68.rc1.el6_10.1.ppc, bind-sdb-32:9.8.2-0.68.rc1.el6_10.1
Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.1, bind-chroot-32:9.8.2-0.68.rc1.el6_10.1, bind-libs-32:9.8.2-0.68.rc1.el6_10.1 +1
Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.68.rc1.el6_10.1, bind-sdb-32:9.8.2-0.68.rc1.el6_10.1

Fixes 1 record

TI-2018-04147 CVE-2018-5740 · GHSA-rqpc-6vjv-w22p

A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named

HIGH 67

"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.60236 Published 2019-01-16 Partial fix CWE-617