• [SECURITY] [DSA 4994-1] bind9 security update

    From Salvatore Bonaccorso@21:1/5 to All on Thu Oct 28 22:40:02 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4994-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso October 28, 2021 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : bind9
    CVE ID : CVE-2021-25219

    Kishore Kumar Kothapalli discovered that the lame server cache in BIND,
    a DNS server implementation, can be abused by an attacker to
    significantly degrade resolver performance, resulting in denial of
    service (large delays for responses for client queries and DNS timeouts
    on client hosts).

    For the oldstable distribution (buster), this problem has been fixed
    in version 1:9.11.5.P4+dfsg-5.1+deb10u6.

    For the stable distribution (bullseye), this problem has been fixed in
    version 1:9.16.22-1~deb11u1.

    We recommend that you upgrade your bind9 packages.

    For the detailed security status of bind9 please refer to its security
    tracker page at:
    https://security-tracker.debian.org/tracker/bind9

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmF7B69fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0SW8A/9Eb6aJcW3wekH5ncpTvOnPBrkv4qyzz8+DeVWEZA+z8fIKkrgmOyBjclG piNtTJUZsFNp7n0FSPtId7AiXsSSDz6xMOSsyHfHEdDrQ/BD+rYJC7VtBRBzdZbD eXKmMyPg0zz2KFeQ1Bkk6JeL/9BQ1+I+Th9peo1PLfWxCCbzXyzRwxHsktHaKf2q VbYEFobEzB9TAWW6Z5yC2zJjHTe+816HiHc6s7U8xtTLyfjfu3qmEZf1unFja8Po +UWNiuqI3bdeuzKeJ2ByRj46RkPM3pekrAO4bjS6Xp4QxXe9n+IJ37tm3CgXSl86 ukBIzA5JYlI53KyHANZOAM4MRSxVCQjU+dbE/KikZEE/F2jpAoFzSxezbinQId6p My0JdJ7KUQ6omDbXt23fxtQePLCQm47AFs3G/x2JSyTmdq9ZNbvUf6KSKeqe/11g K13Ip3QcncbFk8sODDxSIY4Add6Jc0Fi56so1j07f+aLty/rlo9/Bo2vc73SoiKl dkqhtN2nDUhfKvqTLGPz2MfjFO7LbTwRqGb/KQWEyC9Hqyfffk7vVXNgi7cqGAC3 FOtg4ehuORdZJBh3W0Gxw1QUjvJyu7WTGL6l733wxy2gDlRGxLzc+vnwRSjxNNJp girEEKETk9VV4b0GnlZp1my7Rbp+1V4RDN6JIf3yfvWRd9JvXrw=
    =PxZj
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)