Skip to content
OpenAdvisories
Medium ELSA-2021-3325 1 CVE

Moderate: bind security update (Oracle Linux 7)

Published Sep 1, 2021 · Updated Sep 1, 2021

Ecosystem: Oracle Linux

Summary

[32:9.11.4-26.P2.7]
- Apply again patch 172, got removed by mistake

[32:9.11.4-26.P2.6]
- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-chroot 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-devel 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-export-devel 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-export-libs 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-libs 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-libs-lite 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-license 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-lite-devel 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-pkcs11 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-pkcs11-devel 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-pkcs11-libs 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-pkcs11-utils 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-sdb 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-sdb-chroot 32:9.11.4-26.P2.el7_9.7
Oracle Linux · 7 bind-utils 32:9.11.4-26.P2.el7_9.7

Vulnerabilities 1

  • Medium 6.5
    CVE-2021-25214

    A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

    In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vu…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine