Red Hat Product Errata RHSA-2025:1718 - Security Advisory
Issued:
2025-02-20
Updated:
2025-02-20

RHSA-2025:1718 - Security Advisory

Synopsis

Important: bind security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for bind is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2342879 - CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
bind-9.11.4-26.P2.el7_9.18.src.rpm SHA-256: 6fa83b7d6e7dd645e03ec0ae6b809b3f84a38d8d8edc708095f6e23c04a73682
x86_64
bind-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: e46b54b3379b1b5c41efa65990147c91d0423325986f2aaceba8fa03d8228856
bind-chroot-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: a322ce9db0609c1f8524a9f62f5e3c3888d67b0d6e4d413b270a51aa172a9a9f
bind-debuginfo-9.11.4-26.P2.el7_9.18.i686.rpm SHA-256: 2e8adfd7a83e2a7cbb80b9c33522df2f49f727c3f322f3134097b1548b44ce76
bind-debuginfo-9.11.4-26.P2.el7_9.18.i686.rpm SHA-256: 2e8adfd7a83e2a7cbb80b9c33522df2f49f727c3f322f3134097b1548b44ce76
bind-debuginfo-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: dffa4728b52b61e2b4553b5f8fb061e8ded83861256532fcb94b9697ccd7b146
bind-debuginfo-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: dffa4728b52b61e2b4553b5f8fb061e8ded83861256532fcb94b9697ccd7b146
bind-devel-9.11.4-26.P2.el7_9.18.i686.rpm SHA-256: 5123cb7df66d77907caff372bf6ad54c0417031fc56d29926252d51c0ee13777
bind-devel-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: e61d9a34ff164f8887d2bb15395d82c005eddc63d3ee5ced76457e568a33e5b9
bind-export-devel-9.11.4-26.P2.el7_9.18.i686.rpm SHA-256: f40336ab475a1674b8f035667443cc67f74d6fdb31bd5da2498f464a61bab426
bind-export-devel-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: c0552c4c7feeeada9766512e571d8d476bb04a787b05598107dc8566acb725b6
bind-export-libs-9.11.4-26.P2.el7_9.18.i686.rpm SHA-256: 86398f7ab3a0dd64a419981c6aa3b8e7516eb7fa0302010c64da4852a7530afa
bind-export-libs-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: 19ffa274dfc8515271a7f9c8182ed9a9b828a1fd9c39e92caece80623d414165
bind-libs-9.11.4-26.P2.el7_9.18.i686.rpm SHA-256: 8a6bf9926fbcf7917dfe1209781342c77d03a08ac9f1c674d0258bf279da6f01
bind-libs-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: b68a00474507379165b80f9b8d240681d352280ca2af03c04fa58dc71099da0b
bind-libs-lite-9.11.4-26.P2.el7_9.18.i686.rpm SHA-256: 6b66d5d0c254d7257d6c9887a03993a1defc35ca5cc683259069dbd82176b149
bind-libs-lite-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: 68f2c34ddab0ba9c9990d135ade532d56f15a09601814f5901fb95b4a8a54ccf
bind-license-9.11.4-26.P2.el7_9.18.noarch.rpm SHA-256: 85692803e0cad636ea97d2bbeee6e37a895034a02229aefe8f6b90e4cd6f2461
bind-lite-devel-9.11.4-26.P2.el7_9.18.i686.rpm SHA-256: 0e54c06b9ed47c6838b0131c34af3bca7b219440d59a238d455920eb42ff6401
bind-lite-devel-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: 2135e245e45d0db9821a1964d9ed525316c98f4e474e10bcaa63ed827b826ba9
bind-pkcs11-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: e4d029ad1ff84c9135cc7f08a8b62bf27f549494faa4941d962ac9776e3656d7
bind-pkcs11-devel-9.11.4-26.P2.el7_9.18.i686.rpm SHA-256: db6f247143eb9bd412d2a4bce68d84baefe245085dcc1b9e07c401d3cf83e0a8
bind-pkcs11-devel-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: 320b94437ba9ce17c30985d916bf245f0ad277dd4af5aa16c91fe3b6a402ebe1
bind-pkcs11-libs-9.11.4-26.P2.el7_9.18.i686.rpm SHA-256: f4bbb4489b06c3b6170e45f232dec5117d1ff2ab4cd5a80df400f96f8bb873dd
bind-pkcs11-libs-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: b571998f8a55bf64f19ac1f26bbcdf0dc651f982329b94b1093dcd218e71a766
bind-pkcs11-utils-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: 79aeca3ebfc7d6f8904c40d3d1d873d73351aad31d9b254e4dc63737bb2a6f82
bind-sdb-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: 8af65366966d2116e25541cd0dc9b83b2a76ecbb0cdee92634c2a3b2ff7d5646
bind-sdb-chroot-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: b3981715800df0b234ab87fd26783cfe6368841a757af03dc3afb8e5f8594202
bind-utils-9.11.4-26.P2.el7_9.18.x86_64.rpm SHA-256: cfb6b5e31b2ee830506860921cc77d9b1e9691d8f605c0e19ccee748eb1cea8d

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
bind-9.11.4-26.P2.el7_9.18.src.rpm SHA-256: 6fa83b7d6e7dd645e03ec0ae6b809b3f84a38d8d8edc708095f6e23c04a73682
s390x
bind-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 8231bc9992d46abd783ed3b754710a9da37a2afa06b3cf6319e7040d1ef3cf0c
bind-chroot-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: f5d4abfc3c3d38a321ed8a7f40667977eae94cdbb2c10f5d08f8d61090868a57
bind-debuginfo-9.11.4-26.P2.el7_9.18.s390.rpm SHA-256: 713a35b4019158a42ddce6b39031bb2ffc1fe6708c403b0c26d021447ae7d788
bind-debuginfo-9.11.4-26.P2.el7_9.18.s390.rpm SHA-256: 713a35b4019158a42ddce6b39031bb2ffc1fe6708c403b0c26d021447ae7d788
bind-debuginfo-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 685df59847ebca357e309ef261b373e1f21a9362dd50710d670629ea5cc43a15
bind-debuginfo-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 685df59847ebca357e309ef261b373e1f21a9362dd50710d670629ea5cc43a15
bind-devel-9.11.4-26.P2.el7_9.18.s390.rpm SHA-256: baf62191aac4f631099a064f6e2a5be080d52feeb4a4a380debd7ec2697122bd
bind-devel-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 0918f156e59eae285ed09dcd42e46e2039cf93136638f639358f0bd472fd324c
bind-export-devel-9.11.4-26.P2.el7_9.18.s390.rpm SHA-256: 2435137ee3c9b90d38eaa8a2e62c32dafffd7fc57ee4857784f103c0a1571cfc
bind-export-devel-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: aa61088f6e67278c5b2cd9f84036814d0a10937f5959a6a0dccee3d2e0390508
bind-export-libs-9.11.4-26.P2.el7_9.18.s390.rpm SHA-256: f797f0359d779390a5cdd432e14b09ea3a211058a552de29ccf183cac9610af3
bind-export-libs-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 384ba7e5161e7b6ee470c0d45fa03622d424d88d4a2fc840faf3cff6494f9cd9
bind-libs-9.11.4-26.P2.el7_9.18.s390.rpm SHA-256: 869b16e3fe83280bfee40cbab1fc0e7572c1d367e9a311f5c967ec05556c5691
bind-libs-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 3fb4df5798ed5ab873b0c3001b95b1de1702ad31f07ea8e68018b1f4c603c4cb
bind-libs-lite-9.11.4-26.P2.el7_9.18.s390.rpm SHA-256: b242f69be1bbc445a2c61a8a69df8132b0478698a0694ae851e4d7198caad3ea
bind-libs-lite-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: d78852d9f25a780d352dbe8cad7a27765ca39951b4a2ce685aef568b707ee4f4
bind-license-9.11.4-26.P2.el7_9.18.noarch.rpm SHA-256: 85692803e0cad636ea97d2bbeee6e37a895034a02229aefe8f6b90e4cd6f2461
bind-lite-devel-9.11.4-26.P2.el7_9.18.s390.rpm SHA-256: 2028ced69fa699d4df6cbece8a7316f3bccf5c12b1201a74311c454a6a50d148
bind-lite-devel-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 920fb86a74f6b7f1ca6db4b2a0787a8a1f252e30d11b27e56f19158c9bb06304
bind-pkcs11-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 161d8e47fd1235888990c4e17a2f45dd3de6b2d0e52245eefdc49cc88cd8d339
bind-pkcs11-devel-9.11.4-26.P2.el7_9.18.s390.rpm SHA-256: f4f1a1b7347e3b4efda6d72fd14862ed398287a8af3f68bca07ce27bac8733cb
bind-pkcs11-devel-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 9ebea9e14acbec3c5739f4f2ca85ecf4ebaa98215a0a9cda75385a691a9c37a0
bind-pkcs11-libs-9.11.4-26.P2.el7_9.18.s390.rpm SHA-256: 5ea586c4632807b7acfaf2c23bdf7164445a13228123aa92582cc7d19abf3b30
bind-pkcs11-libs-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 2d428224d48f2f7f7afecbeaba4f644936896da21ab5d0826561093ecec95592
bind-pkcs11-utils-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: cfc99d1419c4bf6e0af0df01b269abedba44545b1dc1a052780ced76a72bca9a
bind-sdb-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 18586cdb264f089ea9853a1c8d6363477d70d55e0d36d9a315f613867565b05d
bind-sdb-chroot-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 40ac504036b7e70fc271292e4b8edbaf22102e6cd26e335b17aa5724e3de231b
bind-utils-9.11.4-26.P2.el7_9.18.s390x.rpm SHA-256: 19a326707c997f395c322d2e118968341d6b81d16ff58a66e7acf17c378f8ba0

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
bind-9.11.4-26.P2.el7_9.18.src.rpm SHA-256: 6fa83b7d6e7dd645e03ec0ae6b809b3f84a38d8d8edc708095f6e23c04a73682
ppc64
bind-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: e4bee19dd8c06c26602faf68cb2bf19809363399435b364fe95404a95b72a5e1
bind-chroot-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: fb029be86f5d8b85e2476237ddfa70f1f047122158c8451a49c2726831ca3ef5
bind-debuginfo-9.11.4-26.P2.el7_9.18.ppc.rpm SHA-256: f90e0d5c1a2b5c6baf3861de9b5f8ef5483f156d73a4de4a19c32638c1521b4d
bind-debuginfo-9.11.4-26.P2.el7_9.18.ppc.rpm SHA-256: f90e0d5c1a2b5c6baf3861de9b5f8ef5483f156d73a4de4a19c32638c1521b4d
bind-debuginfo-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: 43357d770ed2a812e21fb7eeb6d81a3c326e71ebd9ebfb1bc41e52ae480f93f1
bind-debuginfo-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: 43357d770ed2a812e21fb7eeb6d81a3c326e71ebd9ebfb1bc41e52ae480f93f1
bind-devel-9.11.4-26.P2.el7_9.18.ppc.rpm SHA-256: 739528cab2f67381334e34121e8d6e855448db3b4b5d93904ffb7d4132ab1bae
bind-devel-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: 005225d5387b3e4740f379a90f07559368983bd9231c0bff7a99f202f2fdc7f5
bind-export-devel-9.11.4-26.P2.el7_9.18.ppc.rpm SHA-256: 01f798ef5ac99e91019c9cbb6cca54cd69e7bf61e051c245f21f5987223ccbcf
bind-export-devel-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: 6bd7a77c759fa0bf55b88622ccbfb66f2a8fb8c4421bd604de61c5d40de0e6b7
bind-export-libs-9.11.4-26.P2.el7_9.18.ppc.rpm SHA-256: 3401a955dbcac1431381cdf793ca5cec7937b3f2af1ee037c02cec7cef3b0fff
bind-export-libs-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: 4121ba84389fa82344c41d45357f844bc0a4130a0b6a87faa8317f06146363df
bind-libs-9.11.4-26.P2.el7_9.18.ppc.rpm SHA-256: cb6ce60777a96e61a71c6e5160cd74704d1e76e1437d43e07ac27bab0f2a2ad9
bind-libs-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: f0c228b2028dbbb79cf0ffed09e8def6dd88b81f37a649f11a402181cb98f7c6
bind-libs-lite-9.11.4-26.P2.el7_9.18.ppc.rpm SHA-256: 775b51bc624bcc2279bfff478d5dadfc1df119c250f53a97741f5866c13cb89d
bind-libs-lite-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: d46748203787153739ae639775bcf34bcf23ec10de86be75ad8d78cb2a85dc12
bind-license-9.11.4-26.P2.el7_9.18.noarch.rpm SHA-256: 85692803e0cad636ea97d2bbeee6e37a895034a02229aefe8f6b90e4cd6f2461
bind-lite-devel-9.11.4-26.P2.el7_9.18.ppc.rpm SHA-256: 0d4eb44e97def12ed410349e5815bc274b419a0bccffb93095150b0e4ce96179
bind-lite-devel-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: 5f054b0247db651af2a6c1665b830dbe63d5447b68b8cba3c406c1ca17ed55ba
bind-pkcs11-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: b63a2994cedc0f84f24f7d3ed7c1199ffab35f874a30ebe25b84d9068c40bbb2
bind-pkcs11-devel-9.11.4-26.P2.el7_9.18.ppc.rpm SHA-256: 3aa2e25d684c799f054ad18f1bc64412a7a2d931820bffec2599a046e1478a2a
bind-pkcs11-devel-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: 7b374281644be173548404db97e2bac82ba4ee9c486ab38f548ec2a42511a67b
bind-pkcs11-libs-9.11.4-26.P2.el7_9.18.ppc.rpm SHA-256: a7fb3f1a04baf1a0328ade1f9702b6da9fa4d188c5f2a38dc7924aff0722df1c
bind-pkcs11-libs-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: 12e8162abf64d1d2cd6a92289184ee3f54f761d65103318353e9fd756d3c5fdd
bind-pkcs11-utils-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: afd65ea8679fb8727ea19209b38c60982f21648c045d1219b496d802a9aed502
bind-sdb-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: c7004960e113416c5b66b200846c0f5943a606a0a9affabc6c368727749e2709
bind-sdb-chroot-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: 54041a52f714c1329f8cd4528787180f28f61d7e1e4e2b71189546356a24de63
bind-utils-9.11.4-26.P2.el7_9.18.ppc64.rpm SHA-256: 2e9ff7288589ab2635e3765734074cab260039bc71e464ba4aca11c49aa7a4cc

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
bind-9.11.4-26.P2.el7_9.18.src.rpm SHA-256: 6fa83b7d6e7dd645e03ec0ae6b809b3f84a38d8d8edc708095f6e23c04a73682
ppc64le
bind-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: 5e20357ba383562e2366b1eaa06d3228916721370e61a19cc034efa92a8d5af9
bind-chroot-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: 0f1840f092325fde7e238d89a6be82160d028b882fc0ef42a45894ee0c2c7fb5
bind-debuginfo-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: b47613715d662fee0c990873b29d23bf04a85fb1cb25b02c95b75d21a4a33aba
bind-debuginfo-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: b47613715d662fee0c990873b29d23bf04a85fb1cb25b02c95b75d21a4a33aba
bind-devel-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: 2fe31ef8c2b21a38736616d3e3b401b67152578e8becb838d2820316f5c464ed
bind-export-devel-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: 0be6e708087c9e172f2c1e66fb2d43d3c0c8268f2c599129b7d483e880be2c01
bind-export-libs-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: c703daa3cbfd1480094f4e7fc25bf4614cd0d46dcebee8c440c2fe5a90d36b02
bind-libs-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: 1cd9a2d4e2585d963ca4432644e64248ef3b0bf6640a1f0d3bf0a7ea0b019b1a
bind-libs-lite-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: d0dc8f788823fe921b478ae50eb556bbb8adf74e6584393a13f82b35341585fa
bind-license-9.11.4-26.P2.el7_9.18.noarch.rpm SHA-256: 85692803e0cad636ea97d2bbeee6e37a895034a02229aefe8f6b90e4cd6f2461
bind-lite-devel-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: 1a7d83da643e7f43bbe0a03dd7926b24c91ec305a1bfafc6e72c30f5993aadf6
bind-pkcs11-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: 7baa13b612cabb580b3ce96370c5d33bdc62cf856bb7acfa11bdb58eab1ee514
bind-pkcs11-devel-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: 1d91b5412fd12ea149f02653426bd203672c17499bef13747ec2f4816519b463
bind-pkcs11-libs-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: da80fdd2631515da987b65b81cb17d537384a0bed02d873d2b19599a2f603252
bind-pkcs11-utils-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: d45cdcf96b46c7631224252ef4f462fdd9c8ec88350d0fa0869c9620fb1ff564
bind-sdb-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: a96556e0adca3c577fbaac90e62892414c31ccdd6fb43df3806b9a6a97a63131
bind-sdb-chroot-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: 4eff3942e7607eb02978e9debdbdeec9b4796d35a04bcec99cb75e99447e2223
bind-utils-9.11.4-26.P2.el7_9.18.ppc64le.rpm SHA-256: 2a337b5a59de184737b953566933ab4ad72ef9998da751d1ffe59cb023722e87

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.