Advisories » MGASA-2021-0275

Updated bind packages fix a security vulnerability

Publication date: 23 Jun 2021
Modification date: 23 Jun 2021
Type: security
Affected Mageia releases : 7
CVE: CVE-2021-25214

Description

Incremental zone transfers (IXFR) provide a way of transferring changed
portion(s) of a zone between servers. An IXFR stream containing SOA records
with an owner name other than the transferred zone's apex may cause the
receiving named server to inadvertently remove the SOA record for the zone in
question from the zone database. This leads to an assertion failure when the
next SOA refresh query for that zone is made (CVE-2021-25214).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=28978
• https://kb.isc.org/v1/docs/cve-2021-25214
• https://www.debian.org/security/2021/dsa-4909
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25214

SRPMS

7/core

• bind-9.11.6-1.5.mga7