RHSA-2022:6779: Important: bind security update
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.Security Fix(es): bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177) bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/bindto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-chrootto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-debugsourceto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-develto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-export-develto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-export-libsto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-export-libs-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-libsto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-libs-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-libs-liteto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-libs-lite-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-licenseto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-lite-develto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-pkcs11to a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-pkcs11-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-pkcs11-develto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-pkcs11-libsto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-pkcs11-libs-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-pkcs11-utilsto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-pkcs11-utils-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-sdbto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-sdb-chrootto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-sdb-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-utilsto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bind-utils-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/python3-bindto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1 - Upgrade
Upgrade
redhat/bindto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-chrootto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-debugsourceto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-develto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-export-develto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-export-libsto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-export-libs-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-libsto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-libs-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-libs-liteto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-libs-lite-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-lite-develto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-pkcs11to a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-pkcs11-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-pkcs11-develto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-pkcs11-libsto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-pkcs11-libs-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-pkcs11-utilsto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-pkcs11-utils-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-sdbto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-sdb-chrootto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-sdb-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-utilsto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa - Upgrade
Upgrade
redhat/bind-utils-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.26-4.el8_4.1.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:6779?
The severity of RHSA-2022:6779 is classified as important.
How do I fix RHSA-2022:6779?
To fix RHSA-2022:6779, update the BIND packages to version 9.11.26-4.el8_4.1 or later.
Which BIND packages are affected by RHSA-2022:6779?
Affected BIND packages include bind, bind-chroot, bind-debuginfo, and several others based on the version mentioned.
What does RHSA-2022:6779 address in BIND?
RHSA-2022:6779 addresses multiple vulnerabilities that may affect the security and functionality of the BIND DNS server.
How can I verify if I am vulnerable to RHSA-2022:6779?
You can verify your vulnerability to RHSA-2022:6779 by checking if your installed version of BIND is prior to 9.11.26-4.el8_4.1.