Lucene search

K
debianDebianDEBIAN:DSA-4857-1:A52EC
HistoryFeb 18, 2021 - 9:42 p.m.

[SECURITY] [DSA 4857-1] bind9 security update

2021-02-1821:42:20
lists.debian.org
25

0.187 Low

EPSS

Percentile

96.3%


Debian Security Advisory DSA-4857-1 [email protected]
https://www.debian.org/security/ Salvatore Bonaccorso
February 18, 2021 https://www.debian.org/security/faq


Package : bind9
CVE ID : CVE-2020-8625
Debian Bug : 983004

A buffer overflow vulnerability was discovered in the SPNEGO
implementation affecting the GSSAPI security policy negotiation in BIND,
a DNS server implementation, which could result in denial of service
(daemon crash), or potentially the execution of arbitrary code.

For the stable distribution (buster), this problem has been fixed in
version 1:9.11.5.P4+dfsg-5.1+deb10u3.

We recommend that you upgrade your bind9 packages.

For the detailed security status of bind9 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/bind9

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]