Apply Applicable Updates

中レベル 1手動レビューbind

説明

Over time, patches will be released to resolve defects in BIND. It is recommended that such patches be applied soon after they are available based on risk. High risk vulnerabilities should be patched within 30 days of availability. Manual review: the check needs remote queries, architecture knowledge or site policy.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Verify that the latest patch for the platform version of BIND is installed within 30 days of being available. Use the -v option to named to get the details version information. $ /sbin/named -v BIND 9.11.4-P2-RedHat-9.11.4-x.x.x

修正方法

修正方法: ガイダンスまたは IaC パッチ

Update BIND to the most current revision available. Institute a patch process that aims to apply security updates within 30 days of their release. Subscribe to bind- announce@lists.isc.org on the https://www.isc.org web site to receive notifications of available BIND updates.

プロパティ

オペレーティングシステム: すべて
タグ: binddnsoperations
参照: CIS ISC BIND DNS Server 9.11 Benchmark v1.0.0 - 9.1 Apply Applicable Updates