Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Apache DNS Server (bind) on Red Hat Linux has a security issue

published 1 year ago

Summary

A security update is available for the Apache DNS server used on Red Hat Linux systems. This update fixes a security issue that could allow an attacker to disrupt DNS service. It's recommended to apply the update to ensure the integrity of your DNS service.

What to do

Update redhat bind9.16 to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-chroot to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-debuginfo to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-debugsource to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-devel to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-dnssec-utils to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-dnssec-utils-debuginfo to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-doc to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-libs to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-libs-debuginfo to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-license to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-utils to version 32:9.16.23-0.22.el8_10.2.
Update redhat bind9.16-utils-debuginfo to version 32:9.16.23-0.22.el8_10.2.
Update redhat python3-bind9.16 to version 32:9.16.23-0.22.el8_10.2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-chroot	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-debuginfo	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-debugsource	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-devel	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-dnssec-utils	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-dnssec-utils-debuginfo	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-doc	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-libs	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-libs-debuginfo	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-license	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-utils	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	bind9.16-utils-debuginfo	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::appstream	redhat	python3-bind9.16	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-chroot	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-debuginfo	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-debugsource	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-devel	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-dnssec-utils	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-dnssec-utils-debuginfo	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-doc	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-libs	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-libs-debuginfo	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-license	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-utils	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	bind9.16-utils-debuginfo	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2
Red Hat:enterprise_linux:8::crb	redhat	python3-bind9.16	< 32:9.16.23-0.22.el8_10.2 Fix: upgrade to 32:9.16.23-0.22.el8_10.2

Original advisory text

Red Hat Security Advisory: bind9.16 security update

References

https://access.redhat.com/errata/RHSA-2025:1676 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2342879 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1676.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-11187 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-11187 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-11187 Vendor Advisory
https://kb.isc.org/docs/cve-2024-11187 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published20 Feb 2025

Updated25 Mar 2026

First seen25 Mar 2026

Sources

RHSA-2025:1676 · OSV

Track software like this

Free during beta