Red Hat Security Advisory

RHSA-2019:2057

bind security, bug fix, and enhancement update

Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bind-32:9.11.4-9.P2.el7, bind-export-libs-32:9.11.4-9.P2.el7, bind-libs-32:9.11.4-9.P2.el7 +3
Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.11.4-9.P2.el7, bind-chroot-32:9.11.4-9.P2.el7, bind-devel-32:9.11.4-9.P2.el7 +8
Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.11.4-9.P2.el7, bind-export-libs-32:9.11.4-9.P2.el7, bind-libs-32:9.11.4-9.P2.el7 +3
Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.11.4-9.P2.el7, bind-chroot-32:9.11.4-9.P2.el7, bind-devel-32:9.11.4-9.P2.el7 +8
Red Hat Enterprise Linux Server (v. 7) bind-32:9.11.4-9.P2.el7, bind-chroot-32:9.11.4-9.P2.el7, bind-export-libs-32:9.11.4-9.P2.el7 +11
Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.11.4-9.P2.el7, bind-devel-32:9.11.4-9.P2.el7.ppc, bind-export-devel-32:9.11.4-9.P2.el7 +7
Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.11.4-9.P2.el7, bind-chroot-32:9.11.4-9.P2.el7, bind-export-libs-32:9.11.4-9.P2.el7 +7
Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.11.4-9.P2.el7, bind-export-devel-32:9.11.4-9.P2.el7, bind-lite-devel-32:9.11.4-9.P2.el7 +3

Fixes 1 record

TI-2018-04148 CVE-2018-5741 · GHSA-ghpp-72v8-mpmv

Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation

LOW 35

To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03451 Published 2019-01-16 Partial fix CWE-863