ELSA-2023-2261

ELSA-2023-2261 - bind security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-05-15

Description

[32:9.16.23-11]
- Correct backport issue in statistics rendering fix (#2126912)

[32:9.16.23-10]
- Handle subtle difference between upstream and rhel (CVE-2022-3094)

[32:9.16.23-9]
- Prevent flooding with UPDATE requests (CVE-2022-3094)
- Handle RRSIG queries when server-stale is active (CVE-2022-3736)
- Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)

[32:9.16.23-8]
- Correct regression preventing bind-dyndb-ldap build (#2162795)

[32:9.16.23-7]
- Prevent freeing zone during statistics rendering (#2101712)

[32:9.16.23-6]
- Bound the amount of work performed for delegations (CVE-2022-2795)
- Add /usr/lib64/named to bind-chroot (#2129466)

Related CVEs

CVE-2022-3924

CVE-2022-2795

CVE-2022-3094

CVE-2022-3736

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 9 (aarch64)	bind-9.16.23-11.el9.src.rpm	bbb05a271b7a5d554c3d4af993536387	-
	bind-9.16.23-11.el9.aarch64.rpm	3fc7173c923472e9ebd2429d38337e0e	-
	bind-chroot-9.16.23-11.el9.aarch64.rpm	b14137bcf43b0a783afb57a4ea4eae1c	-
	bind-devel-9.16.23-11.el9.aarch64.rpm	ace5a91bec7c37beb362671b3cbf0e5d	-
	bind-dnssec-doc-9.16.23-11.el9.noarch.rpm	eac2250a99dc77536c2b29ea1343b32c	-
	bind-dnssec-utils-9.16.23-11.el9.aarch64.rpm	4caffee5b93fbc7184365bdf6f77c848	-
	bind-doc-9.16.23-11.el9.noarch.rpm	d835328202eb6a87613039af2fcbedbd	-
	bind-libs-9.16.23-11.el9.aarch64.rpm	e47e516e4b06d992a74313febd0b56bf	-
	bind-license-9.16.23-11.el9.noarch.rpm	b59f1ebdb7a6f33b8d387422fbeb145a	-
	bind-utils-9.16.23-11.el9.aarch64.rpm	6c44e17d9fdb55612a36aad422e0e874	-
	python3-bind-9.16.23-11.el9.noarch.rpm	fd81bc73fbb1fc68bef676b2596a1576	-
Oracle Linux 9 (x86_64)	bind-9.16.23-11.el9.src.rpm	bbb05a271b7a5d554c3d4af993536387	-
	bind-9.16.23-11.el9.x86_64.rpm	c444fae49229c03b80919c3fd7286b0d	-
	bind-chroot-9.16.23-11.el9.x86_64.rpm	599eadab26b67865ea895304c6dd7fb2	-
	bind-devel-9.16.23-11.el9.i686.rpm	d083cd4e4696ccba7073a201de1e60d0	-
	bind-devel-9.16.23-11.el9.x86_64.rpm	bcc482b5417fffc880fd6838686cea1a	-
	bind-dnssec-doc-9.16.23-11.el9.noarch.rpm	eac2250a99dc77536c2b29ea1343b32c	-
	bind-dnssec-utils-9.16.23-11.el9.x86_64.rpm	4b17ce539429e9d79a6b808e45adf43d	-
	bind-doc-9.16.23-11.el9.noarch.rpm	d835328202eb6a87613039af2fcbedbd	-
	bind-libs-9.16.23-11.el9.i686.rpm	07c23618e6de746982471c6cfc412a35	-
	bind-libs-9.16.23-11.el9.x86_64.rpm	8a2a6a6849a98bbef660dc1f10aca9ea	-
	bind-license-9.16.23-11.el9.noarch.rpm	b59f1ebdb7a6f33b8d387422fbeb145a	-
	bind-utils-9.16.23-11.el9.x86_64.rpm	f5c7f8f2d305ff8bd5fde2744b229d23	-
	python3-bind-9.16.23-11.el9.noarch.rpm	fd81bc73fbb1fc68bef676b2596a1576	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team