Red Hat Security Advisory

RHSA-2019:3552

bind security and bug fix update

Released 2019-11-05 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) bind-32:9.11.4-26.P2.el8, bind-chroot-32:9.11.4-26.P2.el8, bind-devel-32:9.11.4-26.P2.el8 +12
Red Hat Enterprise Linux BaseOS (v. 8) bind-32:9.11.4-26.P2.el8, bind-export-devel-32:9.11.4-26.P2.el8, bind-export-libs-32:9.11.4-26.P2.el8

Fixes 2 records

TI-2019-04530 CVE-2019-6465 · GHSA-5hgv-gr6q-xvqx

Zone transfer controls for writable DLZ zones were not effective

LOW 31

Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03979 Published 2019-10-09 Partial fix CWE-732

TI-2018-04152 CVE-2018-5745 · GHSA-p5r3-98fj-vgcv

An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys

LOW 27

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.02293 Published 2019-10-09 Partial fix CWE-327