Mageia alert MGASA-2021-0275 (bind)

From:
             
 
Mageia Updates <buildsystem-daemon@mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2021-0275: Updated bind packages fix a security vulnerability
Date:
             
 
Wed, 23 Jun 2021 19:14:00 +0200
Message-ID:
             
 
<20210623171400.65E3E9FF35@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2021-0275 - Updated bind packages fix a security vulnerability

Publication date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0275.html
Type: security
Affected Mageia releases: 7
CVE: CVE-2021-25214

Description:
Incremental zone transfers (IXFR) provide a way of transferring changed
portion(s) of a zone between servers. An IXFR stream containing SOA records
with an owner name other than the transferred zone's apex may cause the
receiving named server to inadvertently remove the SOA record for the zone in
question from the zone database. This leads to an assertion failure when the
next SOA refresh query for that zone is made (CVE-2021-25214).

References:
- https://bugs.mageia.org/show_bug.cgi?id=28978
- https://kb.isc.org/v1/docs/cve-2021-25214
- https://www.debian.org/security/2021/dsa-4909
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2...

SRPMS:
- 7/core/bind-9.11.6-1.5.mga7