bind9 - security update

Fixed packages 1

Vulnerabilities 4

• High 7.5
  CVE-2020-8623

  A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c

  In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulner…

  ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  Aug 21, 2020
• Medium 6.5
  CVE-2020-8622

  A truncated TSIG response can lead to an assertion failure

  In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, co…

  ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  Aug 21, 2020
• Medium 4.9
  CVE-2020-8619

  A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

  In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains …

  ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  Jun 17, 2020
• Medium 4.3
  CVE-2020-8624

  update-policy rules of type "subdomain" are enforced incorrectly

  In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a sp…

  ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  Aug 21, 2020