Univention Bugzilla – Bug 51347
bind9: Multiple issues (4.4)
Last modified: 2020-05-27 12:12:48 CEST
New Debian bind9 1:9.10.3.dfsg.P4-12.3+deb9u6A~4.4.4.202005250914 fixes: This update addresses the following issues: * BIND does not sufficiently limit the number of fetches performed when processing referrals (CVE-2020-8616) * A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c (CVE-2020-8617)
--- mirror/ftp/4.4/unmaintained/4.4-1/source/bind9_9.10.3.dfsg.P4-12.3+deb9u5A~4.4.0.201905131414.dsc +++ apt/ucs_4.4-0-errata4.4-4/source/bind9_9.10.3.dfsg.P4-12.3+deb9u6A~4.4.4.202005250914.dsc @@ -1,4 +1,4 @@ -1:9.10.3.dfsg.P4-12.3+deb9u5A~4.4.0.201905131414 [Mon, 13 May 2019 14:14:28 +0200] Univention builddaemon <buildd@univention.de>: +1:9.10.3.dfsg.P4-12.3+deb9u6A~4.4.4.202005250914 [Mon, 25 May 2020 09:14:59 +0200] Univention builddaemon <buildd@univention.de>: * UCS auto build. The following patches have been applied to the original source package 0001-Bug-22478-build-bind-with-libdb4.8 @@ -17,6 +17,11 @@ 0014-Bug-42389-Fix-crash-on-shutdown 0016-Bug-46526-Fix-memory-leak +1:9.10.3.dfsg.P4-12.3+deb9u6 [Thu, 14 May 2020 13:00:44 +0200] Ondřej Surý <ondrej@debian.org>: + + * [CVE-2020-8616]: Fix NXNSATTACK amplification attack on BIND 9 + * [CVE-2020-8617]: Fix assertion failure in TSIG processing code + 1:9.10.3.dfsg.P4-12.3+deb9u5 [Fri, 03 May 2019 22:34:35 +0200] Bernhard Schmidt <berni@debian.org>: [ Marc Deslauriers (Ubuntu) ] <http://10.200.17.11/4.4-4/#8154110919706944102>
OK: yaml OK: announce_errata OK: patch OK: piuparts [4.4-4] 54ae6c462b Bug #51347: bind9 1:9.10.3.dfsg.P4-12.3+deb9u6A~4.4.4.202005250914 doc/errata/staging/bind9.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+)
<http://errata.software-univention.de/ucs/4.4/614.html>