Red Hat Security Advisory

RHSA-2021:0691

bind security update

Released 2021-03-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) bind-32:9.9.4-74.el7_6.6, bind-libs-32:9.9.4-74.el7_6.6, bind-libs-lite-32:9.9.4-74.el7_6.6 +2
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) bind-32:9.9.4-74.el7_6.6, bind-chroot-32:9.9.4-74.el7_6.6, bind-devel-32:9.9.4-74.el7_6.6 +7
Red Hat Enterprise Linux Server EUS (v. 7.6) bind-32:9.9.4-74.el7_6.6, bind-chroot-32:9.9.4-74.el7_6.6, bind-libs-32:9.9.4-74.el7_6.6 +8
Red Hat Enterprise Linux Server Optional EUS (v. 7.6) bind-devel-32:9.9.4-74.el7_6.6, bind-devel-32:9.9.4-74.el7_6.6.ppc, bind-lite-devel-32:9.9.4-74.el7_6.6 +9
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) bind-32:9.9.4-74.el7_6.6, bind-chroot-32:9.9.4-74.el7_6.6, bind-libs-32:9.9.4-74.el7_6.6 +6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) bind-devel-32:9.9.4-74.el7_6.6, bind-lite-devel-32:9.9.4-74.el7_6.6, bind-pkcs11-32:9.9.4-74.el7_6.6 +5

TI-2020-06918 CVE-2020-8625 · GHSA-mxh3-93ph-p9r2

HIGH 71

BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.64161 Published 2021-02-17 Partial fix CWE-120