RHSA-2009:1620: Moderate: bind security update
The Berkeley Internet Name Domain (BIND) is an implementation of the DomainName System (DNS) protocols. BIND includes a DNS server (named); a resolverlibrary (routines for applications to use when interfacing with DNS); andtools for verifying that the DNS server is operating correctly.Michael Sinatra discovered that BIND was incorrectly caching responseswithout performing proper DNSSEC validation, when those responses werereceived during the resolution of a recursive client query that requestedDNSSEC records but indicated that checking should be disabled. A remoteattacker could use this flaw to bypass the DNSSEC validation check andperform a cache poisoning attack if the target BIND server was receivingsuch client queries. (CVE-2009-4022)All BIND users are advised to upgrade to these updated packages, whichcontain a backported patch to resolve this issue. After installing theupdate, the BIND daemon (named) will be restarted automatically.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:1620?
The severity of RHSA-2009:1620 is classified as moderate.
How do I fix RHSA-2009:1620?
To fix RHSA-2009:1620, you need to update the affected BIND packages to version 9.3.6-4.P1.el5_4.1.
What software versions are affected by RHSA-2009:1620?
RHSA-2009:1620 affects various packages of BIND, including bind, bind-chroot, bind-devel, and bind-utils prior to version 9.3.6-4.P1.el5_4.1.
What is BIND in the context of RHSA-2009:1620?
BIND is an implementation of the Domain Name System (DNS) protocols and includes a DNS server and resolver library.
What is the purpose of the update for RHSA-2009:1620?
The update for RHSA-2009:1620 addresses security vulnerabilities in the BIND software to enhance its security.