Lucene search

OracleLinuxELSA-2024-1789

HistoryApr 11, 2024 - 12:00 a.m.

bind security update

2024-04-1100:00:00

linux.oracle.com

security update

bind

bind-dyndb-ldap

version 32:9.16.23-14.4

version 11.9-8.3

rebuild

correct z-stream tag

abi changes

large dns messages fix

cve-2023-50387

import tests

cpu load prevention

assertion failure prevention

nxdomain-redirect

rfc 1918 reverse zones

dns64

serve-stale

recursive query patterns

out-of-memory condition

dnssec validator

version 11.9-8.3

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.7 High

AI Score

Confidence

High

0.05 Low

EPSS

Percentile

92.9%

JSON

bind
[32:9.16.23-14.4]

Rebuild with correct z-stream tag again
[32:9.16.23-14.3]
Rebuild together with bind-dyndb-ldap to adjust ABI changes
[32:9.16.23-14.2]
Import tests for large DNS messages fix
Add downstream change complementing CVE-2023-50387
[32:9.16.23-14.1]
Prevent increased CPU load on large DNS messages (CVE-2023-4408)
Prevent assertion failure when nxdomain-redirect is used with
RFC 1918 reverse zones (CVE-2023-5517)
Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
Specific recursive query patterns may lead to an out-of-memory
condition (CVE-2023-6516)
Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
bind-dyndb-ldap
[11.9-8.3]
Rebuild with correct z-stream tag again
[11.9-8.2]
Rebuild required for BIND changes for KeyTrap change (CVE-2023-50387)

OSVersionArchitecturePackageVersionFilename
oracle linux9srcbind< 9.16.23-14.el9_3.4bind-9.16.23-14.el9_3.4.src.rpm
oracle linux9srcbind< 9.16.23-14.el9_3.4bind-9.16.23-14.el9_3.4.src.rpm
oracle linux9srcbind-dyndb-ldap< 11.9-8.el9_3.3bind-dyndb-ldap-11.9-8.el9_3.3.src.rpm
oracle linux9aarch64bind< 9.16.23-14.el9_3.4bind-9.16.23-14.el9_3.4.aarch64.rpm
oracle linux9aarch64bind-chroot< 9.16.23-14.el9_3.4bind-chroot-9.16.23-14.el9_3.4.aarch64.rpm
oracle linux9aarch64bind-devel< 9.16.23-14.el9_3.4bind-devel-9.16.23-14.el9_3.4.aarch64.rpm
oracle linux9noarchbind-dnssec-doc< 9.16.23-14.el9_3.4bind-dnssec-doc-9.16.23-14.el9_3.4.noarch.rpm
oracle linux9aarch64bind-dnssec-utils< 9.16.23-14.el9_3.4bind-dnssec-utils-9.16.23-14.el9_3.4.aarch64.rpm
oracle linux9noarchbind-doc< 9.16.23-14.el9_3.4bind-doc-9.16.23-14.el9_3.4.noarch.rpm
oracle linux9aarch64bind-dyndb-ldap< 11.9-8.el9_3.3bind-dyndb-ldap-11.9-8.el9_3.3.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	bind	< 9.16.23-14.el9_3.4	bind-9.16.23-14.el9_3.4.src.rpm
oracle linux	9	src	bind	< 9.16.23-14.el9_3.4	bind-9.16.23-14.el9_3.4.src.rpm
oracle linux	9	src	bind-dyndb-ldap	< 11.9-8.el9_3.3	bind-dyndb-ldap-11.9-8.el9_3.3.src.rpm
oracle linux	9	aarch64	bind	< 9.16.23-14.el9_3.4	bind-9.16.23-14.el9_3.4.aarch64.rpm
oracle linux	9	aarch64	bind-chroot	< 9.16.23-14.el9_3.4	bind-chroot-9.16.23-14.el9_3.4.aarch64.rpm
oracle linux	9	aarch64	bind-devel	< 9.16.23-14.el9_3.4	bind-devel-9.16.23-14.el9_3.4.aarch64.rpm
oracle linux	9	noarch	bind-dnssec-doc	< 9.16.23-14.el9_3.4	bind-dnssec-doc-9.16.23-14.el9_3.4.noarch.rpm
oracle linux	9	aarch64	bind-dnssec-utils	< 9.16.23-14.el9_3.4	bind-dnssec-utils-9.16.23-14.el9_3.4.aarch64.rpm
oracle linux	9	noarch	bind-doc	< 9.16.23-14.el9_3.4	bind-doc-9.16.23-14.el9_3.4.noarch.rpm
oracle linux	9	aarch64	bind-dyndb-ldap	< 11.9-8.el9_3.3	bind-dyndb-ldap-11.9-8.el9_3.3.aarch64.rpm