Red Hat Security Advisory

RHSA-2019:0194

bind security update

Released 2019-01-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-73.el7_6, bind-libs-32:9.9.4-73.el7_6, bind-libs-lite-32:9.9.4-73.el7_6 +2
Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-73.el7_6, bind-chroot-32:9.9.4-73.el7_6, bind-devel-32:9.9.4-73.el7_6 +7
Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-73.el7_6, bind-libs-32:9.9.4-73.el7_6, bind-libs-lite-32:9.9.4-73.el7_6 +2
Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-73.el7_6, bind-chroot-32:9.9.4-73.el7_6, bind-devel-32:9.9.4-73.el7_6 +7
Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-73.el7_6, bind-chroot-32:9.9.4-73.el7_6, bind-libs-32:9.9.4-73.el7_6 +8
Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-73.el7_6, bind-devel-32:9.9.4-73.el7_6.ppc, bind-lite-devel-32:9.9.4-73.el7_6 +9
Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-73.el7_6, bind-chroot-32:9.9.4-73.el7_6, bind-libs-32:9.9.4-73.el7_6 +6
Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-73.el7_6, bind-lite-devel-32:9.9.4-73.el7_6, bind-pkcs11-devel-32:9.9.4-73.el7_6 +2
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) bind-32:9.9.4-73.el7_6, bind-chroot-32:9.9.4-73.el7_6, bind-libs-32:9.9.4-73.el7_6 +6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) bind-devel-32:9.9.4-73.el7_6, bind-lite-devel-32:9.9.4-73.el7_6, bind-pkcs11-32:9.9.4-73.el7_6 +5

TI-2018-04149 CVE-2018-5742 · GHSA-r4vj-82q4-crg5

LOW 36

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01575 Published 2019-10-30 Fixed CWE-617