ELSA-2023-2792

ELSA-2023-2792 - bind9.16 security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2023-05-24

Description

[32:9.16.23-0.14]
- Handle subtle difference between upstream and rhel (CVE-2022-3094)

[32:9.16.23-0.13]
- Prevent flooding with UPDATE requests (CVE-2022-3094)
- Handle RRSIG queries when server-stale is active (CVE-2022-3736)
- Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)

[32:9.16.23-0.12]
- Include bind9.16-dnssec-utils in public repository (#2115322)

[32:9.16.23-0.11]
- Bound the amount of work performed for delegations (CVE-2022-2795)

[32:9.16.23-0.10]
- Fix possible serve-stale related crash (CVE-2022-3080)
- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)

Related CVEs

CVE-2022-3094

CVE-2022-3924

CVE-2022-3736

CVE-2022-2795

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	bind9.16-9.16.23-0.14.el8.src.rpm	74754f0af589ab7b3f7ad5ac7704d92f97d1951991b64270205e67d409a4c555	-	ol8_aarch64_appstream
	bind9.16-9.16.23-0.14.el8.src.rpm	74754f0af589ab7b3f7ad5ac7704d92f97d1951991b64270205e67d409a4c555	-	ol8_aarch64_appstream_developer
	bind9.16-9.16.23-0.14.el8.src.rpm	74754f0af589ab7b3f7ad5ac7704d92f97d1951991b64270205e67d409a4c555	-	ol8_aarch64_codeready_builder
	bind9.16-9.16.23-0.14.el8.src.rpm	74754f0af589ab7b3f7ad5ac7704d92f97d1951991b64270205e67d409a4c555	-	ol8_aarch64_codeready_builder_developer
	bind9.16-9.16.23-0.14.el8.aarch64.rpm	cc57adf1bb87aa460a68280c982586948081f3307002a34adf09f0d881119cc2	-	ol8_aarch64_appstream
	bind9.16-9.16.23-0.14.el8.aarch64.rpm	cc57adf1bb87aa460a68280c982586948081f3307002a34adf09f0d881119cc2	-	ol8_aarch64_appstream_developer
	bind9.16-chroot-9.16.23-0.14.el8.aarch64.rpm	d37b1904b4634d61c81166af70650090f18870ed094c7af58ee0507590d526bc	-	ol8_aarch64_appstream
	bind9.16-chroot-9.16.23-0.14.el8.aarch64.rpm	d37b1904b4634d61c81166af70650090f18870ed094c7af58ee0507590d526bc	-	ol8_aarch64_appstream_developer
	bind9.16-devel-9.16.23-0.14.el8.aarch64.rpm	057ca51ed67b948468fd0036848e6b232a9925600e614767776b0d7150b8e84a	-	ol8_aarch64_codeready_builder
	bind9.16-devel-9.16.23-0.14.el8.aarch64.rpm	057ca51ed67b948468fd0036848e6b232a9925600e614767776b0d7150b8e84a	-	ol8_aarch64_codeready_builder_developer
	bind9.16-dnssec-utils-9.16.23-0.14.el8.aarch64.rpm	ec859647c38286dad37c1db65e9213bcc976119a05c2b111b9462412e5c64582	-	ol8_aarch64_appstream
	bind9.16-dnssec-utils-9.16.23-0.14.el8.aarch64.rpm	ec859647c38286dad37c1db65e9213bcc976119a05c2b111b9462412e5c64582	-	ol8_aarch64_appstream_developer
	bind9.16-doc-9.16.23-0.14.el8.noarch.rpm	36544d4b851c14c1f14ff1cec6a659203826570496df97c14f7ee286f93352ba	-	ol8_aarch64_codeready_builder
	bind9.16-doc-9.16.23-0.14.el8.noarch.rpm	36544d4b851c14c1f14ff1cec6a659203826570496df97c14f7ee286f93352ba	-	ol8_aarch64_codeready_builder_developer
	bind9.16-libs-9.16.23-0.14.el8.aarch64.rpm	5a5b13ac073a9e0b13a7f3eeb38ad74df01c20c711ebab21c8c473afc944dfca	-	ol8_aarch64_appstream
	bind9.16-libs-9.16.23-0.14.el8.aarch64.rpm	5a5b13ac073a9e0b13a7f3eeb38ad74df01c20c711ebab21c8c473afc944dfca	-	ol8_aarch64_appstream_developer
	bind9.16-license-9.16.23-0.14.el8.noarch.rpm	c72d3e0deccbc7a6b5822ae62b81579cbd15b43b9a15668aab4c5fc690c33823	-	ol8_aarch64_appstream
	bind9.16-license-9.16.23-0.14.el8.noarch.rpm	c72d3e0deccbc7a6b5822ae62b81579cbd15b43b9a15668aab4c5fc690c33823	-	ol8_aarch64_appstream_developer
	bind9.16-utils-9.16.23-0.14.el8.aarch64.rpm	9e18b5485607b6e17f02432cac11735d3d4fc9062b70d0df71dc3ddf7279ef81	-	ol8_aarch64_appstream
	bind9.16-utils-9.16.23-0.14.el8.aarch64.rpm	9e18b5485607b6e17f02432cac11735d3d4fc9062b70d0df71dc3ddf7279ef81	-	ol8_aarch64_appstream_developer
	python3-bind9.16-9.16.23-0.14.el8.noarch.rpm	0a1088ee6f33ed597c3785dc99abb428c014a8ebf1270feedec4172bd824584a	-	ol8_aarch64_appstream
	python3-bind9.16-9.16.23-0.14.el8.noarch.rpm	0a1088ee6f33ed597c3785dc99abb428c014a8ebf1270feedec4172bd824584a	-	ol8_aarch64_appstream_developer
Oracle Linux 8 (x86_64)	bind9.16-9.16.23-0.14.el8.src.rpm	74754f0af589ab7b3f7ad5ac7704d92f97d1951991b64270205e67d409a4c555	-	ol8_x86_64_appstream
	bind9.16-9.16.23-0.14.el8.src.rpm	74754f0af589ab7b3f7ad5ac7704d92f97d1951991b64270205e67d409a4c555	-	ol8_x86_64_appstream_developer
	bind9.16-9.16.23-0.14.el8.src.rpm	74754f0af589ab7b3f7ad5ac7704d92f97d1951991b64270205e67d409a4c555	-	ol8_x86_64_codeready_builder
	bind9.16-9.16.23-0.14.el8.src.rpm	74754f0af589ab7b3f7ad5ac7704d92f97d1951991b64270205e67d409a4c555	-	ol8_x86_64_codeready_builder_developer
	bind9.16-9.16.23-0.14.el8.x86_64.rpm	fe889545a551ad48c3fd65879ac6fea79f21a247004a42f0cba8cef4b8954e01	-	ol8_x86_64_appstream
	bind9.16-9.16.23-0.14.el8.x86_64.rpm	fe889545a551ad48c3fd65879ac6fea79f21a247004a42f0cba8cef4b8954e01	-	ol8_x86_64_appstream_developer
	bind9.16-chroot-9.16.23-0.14.el8.x86_64.rpm	f874d07458c23f14ca9736a21a0de7b8609676220969e33c5c52bc97d76cc6f6	-	ol8_x86_64_appstream
	bind9.16-chroot-9.16.23-0.14.el8.x86_64.rpm	f874d07458c23f14ca9736a21a0de7b8609676220969e33c5c52bc97d76cc6f6	-	ol8_x86_64_appstream_developer
	bind9.16-devel-9.16.23-0.14.el8.i686.rpm	87d055241388eeee8a54b9ce8f5bdfb674a9c7dbb462eca1cc3374007839cbfa	-	ol8_x86_64_codeready_builder
	bind9.16-devel-9.16.23-0.14.el8.i686.rpm	87d055241388eeee8a54b9ce8f5bdfb674a9c7dbb462eca1cc3374007839cbfa	-	ol8_x86_64_codeready_builder_developer
	bind9.16-devel-9.16.23-0.14.el8.x86_64.rpm	961945878644a09081a89caea55e3599098f514753ada11a708c71ebde3256f1	-	ol8_x86_64_codeready_builder
	bind9.16-devel-9.16.23-0.14.el8.x86_64.rpm	961945878644a09081a89caea55e3599098f514753ada11a708c71ebde3256f1	-	ol8_x86_64_codeready_builder_developer
	bind9.16-dnssec-utils-9.16.23-0.14.el8.x86_64.rpm	e258cd92eb57bc17d7aa472533e62e46c09b37a9067abedcef93c981d75aa684	-	ol8_x86_64_appstream
	bind9.16-dnssec-utils-9.16.23-0.14.el8.x86_64.rpm	e258cd92eb57bc17d7aa472533e62e46c09b37a9067abedcef93c981d75aa684	-	ol8_x86_64_appstream_developer
	bind9.16-doc-9.16.23-0.14.el8.noarch.rpm	36544d4b851c14c1f14ff1cec6a659203826570496df97c14f7ee286f93352ba	-	ol8_x86_64_codeready_builder
	bind9.16-doc-9.16.23-0.14.el8.noarch.rpm	36544d4b851c14c1f14ff1cec6a659203826570496df97c14f7ee286f93352ba	-	ol8_x86_64_codeready_builder_developer
	bind9.16-libs-9.16.23-0.14.el8.i686.rpm	99700fa64af5adf6e9f6f5dd23fbd9e2b8f082ffe097cc9de2e878af518a9f8b	-	ol8_x86_64_codeready_builder
	bind9.16-libs-9.16.23-0.14.el8.i686.rpm	99700fa64af5adf6e9f6f5dd23fbd9e2b8f082ffe097cc9de2e878af518a9f8b	-	ol8_x86_64_codeready_builder_developer
	bind9.16-libs-9.16.23-0.14.el8.x86_64.rpm	5f2ee5123502f8f103099f8d5cc8403c9a24d8adfb8bd42be90a28a5e612e78d	-	ol8_x86_64_appstream
	bind9.16-libs-9.16.23-0.14.el8.x86_64.rpm	5f2ee5123502f8f103099f8d5cc8403c9a24d8adfb8bd42be90a28a5e612e78d	-	ol8_x86_64_appstream_developer
	bind9.16-license-9.16.23-0.14.el8.noarch.rpm	c72d3e0deccbc7a6b5822ae62b81579cbd15b43b9a15668aab4c5fc690c33823	-	ol8_x86_64_appstream
	bind9.16-license-9.16.23-0.14.el8.noarch.rpm	c72d3e0deccbc7a6b5822ae62b81579cbd15b43b9a15668aab4c5fc690c33823	-	ol8_x86_64_appstream_developer
	bind9.16-utils-9.16.23-0.14.el8.x86_64.rpm	b892952c6e85deb37390e3506ed156d08390af5cce357dbf135e96eb3e102849	-	ol8_x86_64_appstream
	bind9.16-utils-9.16.23-0.14.el8.x86_64.rpm	b892952c6e85deb37390e3506ed156d08390af5cce357dbf135e96eb3e102849	-	ol8_x86_64_appstream_developer
	python3-bind9.16-9.16.23-0.14.el8.noarch.rpm	0a1088ee6f33ed597c3785dc99abb428c014a8ebf1270feedec4172bd824584a	-	ol8_x86_64_appstream
	python3-bind9.16-9.16.23-0.14.el8.noarch.rpm	0a1088ee6f33ed597c3785dc99abb428c014a8ebf1270feedec4172bd824584a	-	ol8_x86_64_appstream_developer

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team