Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 7: 2019-0299 Critical Bind Security Advisory for TCP Issues

mageia
Calendar Grey October 23, 2019
Dist Mageia Esm H88
Improved Bind Modules for Address Vulnerabilities in Mageia 7 and Bolstered Network Consistency with Essential Updates.
Updated bind packages fix security vulnerabilities Limiting simultaneous TCP clients is ineffective (CVE-2018-5743) Race condition when discarding malformed packets can cause bin...

Summary

Updated bind packages fix security vulnerabilities
Limiting simultaneous TCP clients is ineffective (CVE-2018-5743)
Race condition when discarding malformed packets can cause bind to exit with assertion failure (CVE-2019-6471)
In addition to those two security issues, this package releases also fixes two additional issues: - a missing conflict tag between old bind and bnew ind-utils subpackages, preventing upgrade due to a file conflict - missing root.key file, despite this one being refered in default configuration

References

- https://bugs.mageia.org/show_bug.cgi?id=24422

- https://access.redhat.com/errata/RHSA-2019:1294

- https://access.redhat.com/errata/RHSA-2019:1714

- https://www.cve.org/CVERecord?id=CVE-2018-5743

- https://www.cve.org/CVERecord?id=CVE-2019-6471

Topics%20covered

Topics Covered

security advisory critical bind malformed packets assertion error Mageia TCP client

Resolution

SRPMS

- 7/core/bind-9.11.6-1.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 23 Oct 2019
URL: https://advisories.mageia.org/MGASA-2019-0299.html
Type: security
CVE: CVE-2018-5743, CVE-2019-6471

Topics%20covered

Topics Covered

security advisory critical bind malformed packets assertion error Mageia TCP client

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here