ELSA-2024-1781

ELSA-2024-1781 - bind9.16 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-04-11

Description

[32:9.16.23-0.16.2]
- Prevent crashing at masterformat system test (CVE-2023-6516)

[32:9.16.23-0.16.1]
- Prevent increased CPU load on large DNS messages (CVE-2023-4408)
- Prevent assertion failure when nxdomain-redirect is used with
RFC 1918 reverse zones (CVE-2023-5517)
- Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
- Specific recursive query patterns may lead to an out-of-memory
condition (CVE-2023-6516)
- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Import tests for large DNS messages fix
- Add downstream change complementing CVE-2023-50387

[32:9.16.23-0.16]
- Limit the amount of recursion possible in control channel (CVE-2023-3341)

[32:9.16.23-0.15]
- Strengten cache cleaning to prevent overflowing configured limit
(CVE-2023-2828)

Related CVEs

CVE-2023-50868

CVE-2023-6516

CVE-2023-50387

CVE-2023-5679

CVE-2023-5517

CVE-2023-4408

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	bind9.16-9.16.23-0.16.el8_9.2.src.rpm	d71b39a3ddb03b58c94076bf903fd6b11ab86023b60e548c00fa2771aa76b07f	-	ol8_aarch64_appstream
	bind9.16-9.16.23-0.16.el8_9.2.src.rpm	d71b39a3ddb03b58c94076bf903fd6b11ab86023b60e548c00fa2771aa76b07f	-	ol8_aarch64_codeready_builder
	bind9.16-9.16.23-0.16.el8_9.2.aarch64.rpm	2f12ad05d904b17119e4fd6d1e42668a8390305b9309e1de2da38e242f598e77	-	ol8_aarch64_appstream
	bind9.16-chroot-9.16.23-0.16.el8_9.2.aarch64.rpm	7054221df9cd1fa400c5f7330f08c0c233cfdc51ee17262f6d19bfb4a63b4760	-	ol8_aarch64_appstream
	bind9.16-devel-9.16.23-0.16.el8_9.2.aarch64.rpm	39fd084efdcd9288eeae137bee6586dbecbbaf04745da7befa84d12237c480fd	-	ol8_aarch64_codeready_builder
	bind9.16-dnssec-utils-9.16.23-0.16.el8_9.2.aarch64.rpm	feea7ea49c5b8ebebf5e36b9d09833230cf4a876719568b729bdebbcb1d5a747	-	ol8_aarch64_appstream
	bind9.16-doc-9.16.23-0.16.el8_9.2.noarch.rpm	f5bc98b7d62af3aeb4a66f60ac07985f0e5cf284f29e28ab722f9d4fba5bd71a	-	ol8_aarch64_codeready_builder
	bind9.16-libs-9.16.23-0.16.el8_9.2.aarch64.rpm	428d8f3096c2080d2bd154ebf552b7cd469d29a48c65d015b50a60f6953298f9	-	ol8_aarch64_appstream
	bind9.16-license-9.16.23-0.16.el8_9.2.noarch.rpm	4fbad5e14131bfad32f93187a96d262fb1685d577a304dc4c709bfe0a26b36e0	-	ol8_aarch64_appstream
	bind9.16-utils-9.16.23-0.16.el8_9.2.aarch64.rpm	41c40abd1ff0fb0e0383b742c9e92456d18ca8991d86df3e442125dd9478c282	-	ol8_aarch64_appstream
	python3-bind9.16-9.16.23-0.16.el8_9.2.noarch.rpm	4cb0dac6b492f709f010f85d9f57b37466f2e5fd0a89921246fec95b96824e7d	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	bind9.16-9.16.23-0.16.el8_9.2.src.rpm	d71b39a3ddb03b58c94076bf903fd6b11ab86023b60e548c00fa2771aa76b07f	-	ol8_x86_64_appstream
	bind9.16-9.16.23-0.16.el8_9.2.src.rpm	d71b39a3ddb03b58c94076bf903fd6b11ab86023b60e548c00fa2771aa76b07f	-	ol8_x86_64_codeready_builder
	bind9.16-9.16.23-0.16.el8_9.2.x86_64.rpm	72495e2f1210ac81c3d8c7c9a89950c2de83221f18bbceb66ac09627c6f2aecc	-	ol8_x86_64_appstream
	bind9.16-chroot-9.16.23-0.16.el8_9.2.x86_64.rpm	9773971a48ce5c58e2f1119b0c6c0e57cdeafc396235a434b012342122c2a533	-	ol8_x86_64_appstream
	bind9.16-devel-9.16.23-0.16.el8_9.2.i686.rpm	26eb22dba8790af732ba79f70ba5fbd439901868cef5720b7b90c3a338471011	-	ol8_x86_64_codeready_builder
	bind9.16-devel-9.16.23-0.16.el8_9.2.x86_64.rpm	4149cb40b5bfb4006d4ba4f0a8f52ef237eb5d07cd3c099bd3e6b52d4c33a989	-	ol8_x86_64_codeready_builder
	bind9.16-dnssec-utils-9.16.23-0.16.el8_9.2.x86_64.rpm	74bdcf28f0ad4f148071a368f92a3ef8d538509216d951c920238ec8394cda8a	-	ol8_x86_64_appstream
	bind9.16-doc-9.16.23-0.16.el8_9.2.noarch.rpm	f5bc98b7d62af3aeb4a66f60ac07985f0e5cf284f29e28ab722f9d4fba5bd71a	-	ol8_x86_64_codeready_builder
	bind9.16-libs-9.16.23-0.16.el8_9.2.i686.rpm	d0a4d9b4e6e898a6684ccbbe0cf6119a47d8c00907379d886144ca6638a29d99	-	ol8_x86_64_codeready_builder
	bind9.16-libs-9.16.23-0.16.el8_9.2.x86_64.rpm	f82b6deb82faffa71d1446538f752a1c735aa50ad3ea0367fe7fa33f6f91185a	-	ol8_x86_64_appstream
	bind9.16-license-9.16.23-0.16.el8_9.2.noarch.rpm	4fbad5e14131bfad32f93187a96d262fb1685d577a304dc4c709bfe0a26b36e0	-	ol8_x86_64_appstream
	bind9.16-utils-9.16.23-0.16.el8_9.2.x86_64.rpm	3e5784fcbb052cdef6885dfdcbbe6665ed0623e75e1fe48e25d8f4289a3df26e	-	ol8_x86_64_appstream
	python3-bind9.16-9.16.23-0.16.el8_9.2.noarch.rpm	4cb0dac6b492f709f010f85d9f57b37466f2e5fd0a89921246fec95b96824e7d	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team