Mageia 2021-0275: bind security update
Summary
Incremental zone transfers (IXFR) provide a way of transferring changed
portion(s) of a zone between servers. An IXFR stream containing SOA records
with an owner name other than the transferred zone's apex may cause the
receiving named server to inadvertently remove the SOA record for the zone in
question from the zone database. This leads to an assertion failure when the
next SOA refresh query for that zone is made (CVE-2021-25214).
References
- https://bugs.mageia.org/show_bug.cgi?id=28978
- https://kb.isc.org/v1/docs/cve-2021-25214
- https://www.debian.org/security/2021/dsa-4909
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25214
Resolution
MGASA-2021-0275 - Updated bind packages fix a security vulnerability
SRPMS
- 7/core/bind-9.11.6-1.5.mga7