Apply Applicable Updates

СреднийУровень 1Ручная проверкаbind

Описание

Over time, patches will be released to resolve defects in BIND. It is recommended that such patches be applied soon after they are available based on risk. High risk vulnerabilities should be patched within 30 days of availability. Manual review: the check needs remote queries, architecture knowledge or site policy.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Verify that the latest patch for the platform version of BIND is installed within 30 days of being available. Use the -v option to named to get the details version information. $ /sbin/named -v BIND 9.11.4-P2-RedHat-9.11.4-x.x.x

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Update BIND to the most current revision available. Institute a patch process that aims to apply security updates within 30 days of their release. Subscribe to bind- announce@lists.isc.org on the https://www.isc.org web site to receive notifications of available BIND updates.

Свойства

Операционные системы: Любая
Теги: binddnsoperations
Источник: CIS ISC BIND DNS Server 9.11 Benchmark v1.0.0 - 9.1 Apply Applicable Updates