Skip to content
OpenAdvisories
Medium ELSA-2022-2092 1 CVE

Moderate: bind security, bug fix, and enhancement update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Summary

[32:9.11.36-2]
- Reduce memory used per-view on machine with few processors (#2030239)

[32:9.11.36-2]
- Rebuilt on a new side-tag (#2013993)

[32:9.11.36-1]
- Update to 9.11.36

[32:9.11.26-9]
- Correct tsig system test

[32:9.11.26-8]
- Propagate ephemeral port ranges to chroot (#1950714)

[32:9.11.26-7]
- Do not request softhsm from bind-pkcs11, it is only in modular build
(#1934035)

Fixed packages 17

ReleasePackageFixed in
Oracle Linux · 8 bind 32:9.11.36-3.el8
Oracle Linux · 8 bind-chroot 32:9.11.36-3.el8
Oracle Linux · 8 bind-devel 32:9.11.36-3.el8
Oracle Linux · 8 bind-export-devel 32:9.11.36-3.el8
Oracle Linux · 8 bind-export-libs 32:9.11.36-3.el8
Oracle Linux · 8 bind-libs 32:9.11.36-3.el8
Oracle Linux · 8 bind-libs-lite 32:9.11.36-3.el8
Oracle Linux · 8 bind-license 32:9.11.36-3.el8
Oracle Linux · 8 bind-lite-devel 32:9.11.36-3.el8
Oracle Linux · 8 bind-pkcs11 32:9.11.36-3.el8
Oracle Linux · 8 bind-pkcs11-devel 32:9.11.36-3.el8
Oracle Linux · 8 bind-pkcs11-libs 32:9.11.36-3.el8
Oracle Linux · 8 bind-pkcs11-utils 32:9.11.36-3.el8
Oracle Linux · 8 bind-sdb 32:9.11.36-3.el8
Oracle Linux · 8 bind-sdb-chroot 32:9.11.36-3.el8
Oracle Linux · 8 bind-utils 32:9.11.36-3.el8
Oracle Linux · 8 python3-bind 32:9.11.36-3.el8

Vulnerabilities 1

  • Medium 5.3
    CVE-2021-25219 EPSS 11%

    Lame cache can be abused to severely degrade resolver performance

    In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authorita…