it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Salvatore Bonaccorso <carnil AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 4857-1] bind9 security update
- Date: Thu, 18 Feb 2021 21:42:20 +0000
- List-archive: https://lists.debian.org/msgid-search/E1lCr40-0003yb-GW AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Date:Message-Id:Subject:To:From:Reply-To:Cc:MIME-Version :Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=8ocuBPRrwSLXZgadgtOwH+zcwI1U3XMs1NyUoqYZRP4=; b=NQ Kly/zl9DH1DLLTxxeATW0A+TMkYtIhLnKOzWC5KfIw38JR/STgo9vklJy+D67nCQsRr6OwbVWrzqY xMABDgCRtN7HM7uGqINkoznhiJgNpB8JOgADkCfr/1AviTHaHWl7dYYVNPlCLvOxNd7uMm/DhUBPF 6bO7D4y9wsB6uqYk0ETnFwVospAv1a379O+JQ3BOwWML8Sw8ni7puwE7vmH/Gh4qnI83Gpnx5BEOn NZovKWjKjfj+Pg7OYmetbIYHJWVC14HFUlh+SVpibs1RBt/BoVF5gL0GRr0OIm1Zrud89FPJfVq/P mylEPZvkLYtP9ORD1lK+1x4S9Ru5nSGg==;
- Old-return-path: <carnil AT seger.debian.org>
- Priority: urgent
- Resent-date: Thu, 18 Feb 2021 21:42:37 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <QH-CooTWNME.A.RlC.N9tLgB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-4857-1 security AT debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
February 18, 2021 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : bind9
CVE ID : CVE-2020-8625
Debian Bug : 983004
A buffer overflow vulnerability was discovered in the SPNEGO
implementation affecting the GSSAPI security policy negotiation in BIND,
a DNS server implementation, which could result in denial of service
(daemon crash), or potentially the execution of arbitrary code.
For the stable distribution (buster), this problem has been fixed in
version 1:9.11.5.P4+dfsg-5.1+deb10u3.
We recommend that you upgrade your bind9 packages.
For the detailed security status of bind9 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/bind9
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmAuvpJfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0Sm7g/+LCajoVj6mvq7WNxHcYqw2Ek3nnQl1FBbVRuqbaZJXEsxErjPQih11S9h
WDZLVZqGrzWh0/iCv30edoVNtaz0Lqsj+sQddRG82k09FvvE9NVBlHKISalHulR7
oNn7lPECK65REqc0Kx+XmRM8bSOzruixeDt8zOAYpneue1j7qKpeg5oyLwT0o7rr
rfBSXYPJXbENbIZX4nnhLRDf5J3Xcn1nriw4Tv5W+W1z38o6ZI5iW3TJyWSRcVFn
RE1edUOXsB4PzQuFO1iP7OI9KwjJ3axhjAaArvjVB/f5R9mvLq8QlxDis8twkL9Q
X3tb/H/CZOW20THwsHwMWv0DZwxQITwx0662bEMSDRMS4PFjX++vcpEbg4Zz1pHS
Lq3lPDkQONzHiiSrNgKpbW/YddzuuhbvUx3xY9675UCbIEeMS7M/C86R8zGZv4wW
iP1gayAMxYstZDUPe7Q/NghCoeLBbUP7Hj/3xw0Fbk9vcDyyqplPuNIunqERnOiz
wf88R1q66YlpvNgR6r6iLfcgIlYI64WngHm7qTJ/ot3x53VY/FW2vQUAWcGC65An
eTtcpacc0/N3i1XsjtJRqs+l3bvZrvZAv+VsZKa/tmxny32s1c99FsaNChWBolOp
/ZHyBLPLdzPtTm2jHi8f0IMzhvKsjUTTR/xMCfNDZATf1sYHspo=
=Z37X
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 4857-1] bind9 security update, Salvatore Bonaccorso, 18.02.2021
Archiv bereitgestellt durch MHonArc 2.6.24.