Apply Applicable Updates

中级别 1人工审核bind

说明

Over time, patches will be released to resolve defects in BIND. It is recommended that such patches be applied soon after they are available based on risk. High risk vulnerabilities should be patched within 30 days of availability. Manual review: the check needs remote queries, architecture knowledge or site policy.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Verify that the latest patch for the platform version of BIND is installed within 30 days of being available. Use the -v option to named to get the details version information. $ /sbin/named -v BIND 9.11.4-P2-RedHat-9.11.4-x.x.x

修复方式

修复方法: 操作指南或基础设施补丁

Update BIND to the most current revision available. Institute a patch process that aims to apply security updates within 30 days of their release. Subscribe to bind- announce@lists.isc.org on the https://www.isc.org web site to receive notifications of available BIND updates.

属性

操作系统: 任意
标签: binddnsoperations
参考: CIS ISC BIND DNS Server 9.11 Benchmark v1.0.0 - 9.1 Apply Applicable Updates