Skip to content
OpenAdvisories
Medium RHSA-2019:3552 2 CVEs

Red Hat Security Advisory: bind security and bug fix update

Published Sep 16, 2024 · Updated Sep 2, 2026

Ecosystem: Red Hat

Fixed packages 38

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream bind 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-chroot 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-debugsource 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-devel 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-export-libs-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs-lite 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs-lite-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-license 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-lite-devel 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-devel 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-libs 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-libs-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-utils 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-utils-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-sdb 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-sdb-chroot 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-sdb-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-utils 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-utils-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-bind 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-debugsource 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-export-devel 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-export-libs 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-export-libs-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-libs-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-libs-lite-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-pkcs11-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-pkcs11-libs-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-pkcs11-utils-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-sdb-debuginfo 32:9.11.4-26.P2.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-utils-debuginfo 32:9.11.4-26.P2.el8

Vulnerabilities 2

  • Medium 5.3
    CVE-2019-6465

    Zone transfer controls for writable DLZ zones were not effective

    Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 4.9
    CVE-2018-5745

    An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys

    "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses m…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1666785
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1668682
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1679303
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1679304
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1679307
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3552.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-5745
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-5745
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-5745
  • article
    https://kb.isc.org/docs/cve-2018-5745
  • report
    https://access.redhat.com/security/cve/CVE-2019-6465
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-6465
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-6465
  • article
    https://kb.isc.org/docs/cve-2019-6465