Mageia 2021-0275: bind security update | LinuxSecurity.com

Advisories

MGASA-2021-0275 - Updated bind packages fix a security vulnerability

Publication date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0275.html
Type: security
Affected Mageia releases: 7
CVE: CVE-2021-25214

Incremental zone transfers (IXFR) provide a way of transferring changed
portion(s) of a zone between servers. An IXFR stream containing SOA records
with an owner name other than the transferred zone's apex may cause the
receiving named server to inadvertently remove the SOA record for the zone in
question from the zone database. This leads to an assertion failure when the
next SOA refresh query for that zone is made (CVE-2021-25214).

References:
- https://bugs.mageia.org/show_bug.cgi?id=28978
- https://kb.isc.org/v1/docs/cve-2021-25214
- https://www.debian.org/security/2021/dsa-4909
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25214

SRPMS:
- 7/core/bind-9.11.6-1.5.mga7

Mageia 2021-0275: bind security update

Incremental zone transfers (IXFR) provide a way of transferring changed portion(s) of a zone between servers

Summary

Incremental zone transfers (IXFR) provide a way of transferring changed portion(s) of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in question from the zone database. This leads to an assertion failure when the next SOA refresh query for that zone is made (CVE-2021-25214).

References

- https://bugs.mageia.org/show_bug.cgi?id=28978

- https://kb.isc.org/v1/docs/cve-2021-25214

- https://www.debian.org/security/2021/dsa-4909

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25214

Resolution

MGASA-2021-0275 - Updated bind packages fix a security vulnerability

SRPMS

- 7/core/bind-9.11.6-1.5.mga7

Severity
Publication date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0275.html
Type: security
CVE: CVE-2021-25214

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.