openSUSE-SU-2021:1826-1
openSUSE-SU-2021:1826-1 · Security update for bind
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for bind fixes the following issues: - CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345). - CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that required the DNAME to be processed to resolve itself (bsc#1185345). - Switched from /var/run to /run (bsc#1185073) - Hardening: Compiled binary with PIE flags to make it position independent
Fix available
- Published
- Updated
Stack: system
Affected products and versions
bind openSUSE:Leap 15.3
- Affected ranges
- ECOSYSTEM: < 9.16.6-22.7.1
Update to 9.16.6-22.7.1
Original sources
- https://lists.opensuse.org/archives/list/[email protected]/thread/HSDG2HIUJDFCATG54EOVCAT5D4AVXXKE/
- https://bugzilla.suse.com/1183453
- https://bugzilla.suse.com/1185073
- https://www.suse.com/security/cve/CVE-2021-25214
- https://www.suse.com/security/cve/CVE-2021-25215
- https://osv.dev/vulnerability/openSUSE-SU-2021:1826-1