MGASA-2026-0152
- Source
- https://advisories.mageia.org/MGASA-2026-0152.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0152.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0152
- Upstream
- Published
- 2026-05-19T17:01:09Z
- Modified
- 2026-05-19T17:15:03Z
- Summary
- Updated bind packages fix security vulnerabilities
- Details
-
It was discovered that bind contained a vulnerability where a Malformed BRID/HHIT record can cause named to terminate unexpectedly (CVE-2025-13878). If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (CVE-2026-1519).
- References
-
- https://advisories.mageia.org/MGASA-2026-0152.html
- https://bugs.mageia.org/show_bug.cgi?id=35283
- https://bugs.mageia.org/show_bug.cgi?id=35049
- https://www.openwall.com/lists/oss-security/2026/01/21/3
- https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries
- https://kb.isc.org/docs/cve-2026-1519
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:9 / bind
Package
- Name
- bind
- Purl
- pkg:rpm/mageia/bind?arch=source&distro=mageia-9