Apply Applicable Updates

MediumLevel 1Manual reviewbind

Description

Over time, patches will be released to resolve defects in BIND. It is recommended that such patches be applied soon after they are available based on risk. High risk vulnerabilities should be patched within 30 days of availability. Manual review: the check needs remote queries, architecture knowledge or site policy.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify that the latest patch for the platform version of BIND is installed within 30 days of being available. Use the -v option to named to get the details version information. $ /sbin/named -v BIND 9.11.4-P2-RedHat-9.11.4-x.x.x

How it is fixed

Fix method: Guidance or infrastructure patch

Update BIND to the most current revision available. Institute a patch process that aims to apply security updates within 30 days of their release. Subscribe to bind- announce@lists.isc.org on the https://www.isc.org web site to receive notifications of available BIND updates.

Properties

Operating systems: Any
Tags: binddnsoperations
Reference: CIS ISC BIND DNS Server 9.11 Benchmark v1.0.0 - 9.1 Apply Applicable Updates