Skip to content
OpenAdvisories
High ELSA-2021-1989 1 CVE

Important: bind security update (Oracle Linux 8)

Published May 26, 2021 · Updated May 26, 2021

Ecosystem: Oracle Linux

Summary

[32:9.11.26-4]
- Possible assertion failure on DNAME processing (CVE-2021-25215)

Fixed packages 17

ReleasePackageFixed in
Oracle Linux · 8 bind 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-chroot 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-devel 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-export-devel 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-export-libs 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-libs 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-libs-lite 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-license 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-lite-devel 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-pkcs11 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-pkcs11-devel 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-pkcs11-libs 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-pkcs11-utils 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-sdb 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-sdb-chroot 32:9.11.26-4.el8_4
Oracle Linux · 8 bind-utils 32:9.11.26-4.el8_4
Oracle Linux · 8 python3-bind 32:9.11.26-4.el8_4

Vulnerabilities 1

  • High 7.5
    CVE-2021-25215 EPSS 12%

    An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

    In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version o…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine