Skip to content
OpenAdvisories
Medium RLSA-2022:2092 1 CVE

Moderate: bind security, bug fix, and enhancement update

Published May 10, 2022 · Updated Feb 5, 2026

Ecosystem: Rocky Linux

Summary

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

The following packages have been upgraded to a later upstream version: bind (9.11.36). (BZ#2013993)

Security Fix(es):

* bind: Lame cache can be abused to severely degrade resolver performance (CVE-2021-25219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 bind 2:9.11.36-3.el8

Vulnerabilities 1

  • Medium 5.3
    CVE-2021-25219 EPSS 11%

    Lame cache can be abused to severely degrade resolver performance

    In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authorita…

    ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1934035
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1950714
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2013993
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2017636
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2021814
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2030239