ELSA-2024-2551

ELSA-2024-2551 - bind security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2024-05-07

Description

bind
[9.16.23-18.0.1]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.16.23-18.1]
- Rebuild with correct z-stream tag again

[32:9.16.23-18]
- Prevent crashing at masterformat system test (CVE-2023-6516)

[32:9.16.23-17]
- Import tests for large DNS messages fix
- Add downstream change complementing CVE-2023-50387

[32:9.16.23-16]
- Prevent increased CPU load on large DNS messages (CVE-2023-4408)
- Prevent assertion failure when nxdomain-redirect is used with
RFC 1918 reverse zones (CVE-2023-5517)
- Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
- Specific recursive query patterns may lead to an out-of-memory
condition (CVE-2023-6516)
- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)

bind-dyndb-ldap
[11.9-9]
- Rebuild required for BIND changes for KeyTrap change (CVE-2023-50387)

Related CVEs

CVE-2023-4408

CVE-2023-5517

CVE-2023-50868

CVE-2023-50387

CVE-2023-5679

CVE-2023-6516

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	bind-9.16.23-18.0.1.el9_4.1.src.rpm	101a07b76be1d881be20ee69e0cba8796260b50f108b4c25506988eea43ad97d	-	ol9_aarch64_appstream
	bind-9.16.23-18.0.1.el9_4.1.src.rpm	101a07b76be1d881be20ee69e0cba8796260b50f108b4c25506988eea43ad97d	-	ol9_aarch64_codeready_builder
	bind-dyndb-ldap-11.9-9.el9_4.src.rpm	e12a3d6e0869f8d6e12421d5877d1b8fb383dddcf39eacc3e02755166496d903	-	ol9_aarch64_appstream
	bind-9.16.23-18.0.1.el9_4.1.aarch64.rpm	2ece46ec315ce581466b64d97305798985dab1a80722885760128e97cea92410	-	ol9_aarch64_appstream
	bind-chroot-9.16.23-18.0.1.el9_4.1.aarch64.rpm	0d6853c3f19408d7810332c74ad4bdd88739e62ba0ed3ae9c4f28e39d25a1336	-	ol9_aarch64_appstream
	bind-devel-9.16.23-18.0.1.el9_4.1.aarch64.rpm	cd654b00ab59d4b175039b3be8ab5d637e6b4d94a7806610280fc6d5ad032f97	-	ol9_aarch64_codeready_builder
	bind-dnssec-doc-9.16.23-18.0.1.el9_4.1.noarch.rpm	eb8f4801358a3b7a1136059694586091496c019ff74b82278eb9e25c258474cb	-	ol9_aarch64_appstream
	bind-dnssec-utils-9.16.23-18.0.1.el9_4.1.aarch64.rpm	f728a7305445892fb15d175119288233540845d2ae3699322faa5612614349f0	-	ol9_aarch64_appstream
	bind-doc-9.16.23-18.0.1.el9_4.1.noarch.rpm	1365b604d56937e00de87f08d5873387a856b2525ce643bfd23bf2ff86179840	-	ol9_aarch64_codeready_builder
	bind-dyndb-ldap-11.9-9.el9_4.aarch64.rpm	8b0030a6e50fe82efd990f1c8026dc3b65ad173a12b19ead34e22292b7823770	-	ol9_aarch64_appstream
	bind-libs-9.16.23-18.0.1.el9_4.1.aarch64.rpm	2fc1e67e0b50e483969822fb3b714dcf32f7051730f0b82690ece19df4914656	-	ol9_aarch64_appstream
	bind-license-9.16.23-18.0.1.el9_4.1.noarch.rpm	325303199d6415ab0bd4649d591a254e9fa779d838195cf91a35fb08143e6532	-	ol9_aarch64_appstream
	bind-utils-9.16.23-18.0.1.el9_4.1.aarch64.rpm	245eb2570e79f158995036b53a83ace6dd18606c1308acdea40cd2f3f0fa275e	-	ol9_aarch64_appstream
	python3-bind-9.16.23-18.0.1.el9_4.1.noarch.rpm	06d5b94ba522d8bce7162f01c987ad84c1927d6c15a65fbaaf6246a108c7761e	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	bind-9.16.23-18.0.1.el9_4.1.src.rpm	101a07b76be1d881be20ee69e0cba8796260b50f108b4c25506988eea43ad97d	-	ol9_x86_64_appstream
	bind-9.16.23-18.0.1.el9_4.1.src.rpm	101a07b76be1d881be20ee69e0cba8796260b50f108b4c25506988eea43ad97d	-	ol9_x86_64_codeready_builder
	bind-dyndb-ldap-11.9-9.el9_4.src.rpm	e12a3d6e0869f8d6e12421d5877d1b8fb383dddcf39eacc3e02755166496d903	-	ol9_x86_64_appstream
	bind-9.16.23-18.0.1.el9_4.1.x86_64.rpm	396db2066c01c593038786580dedb20f03e10d33b0c25c7cb99a7beae8a7693a	-	ol9_x86_64_appstream
	bind-chroot-9.16.23-18.0.1.el9_4.1.x86_64.rpm	dacd5be21add0c304e6b4c40cd6755106b81eb37cf5032449af3a1c086948c76	-	ol9_x86_64_appstream
	bind-devel-9.16.23-18.0.1.el9_4.1.i686.rpm	84438f4e7aa0dea1952ec3533a684c0bf028c012f72ab4d5e0d73ab1df4d6257	-	ol9_x86_64_codeready_builder
	bind-devel-9.16.23-18.0.1.el9_4.1.x86_64.rpm	4f6dfafb25ff73d8b4a45edd66421cce59004c1cc0f8e0aa6dade68c8cde27ee	-	ol9_x86_64_codeready_builder
	bind-dnssec-doc-9.16.23-18.0.1.el9_4.1.noarch.rpm	eb8f4801358a3b7a1136059694586091496c019ff74b82278eb9e25c258474cb	-	ol9_x86_64_appstream
	bind-dnssec-utils-9.16.23-18.0.1.el9_4.1.x86_64.rpm	eb0dae4aed129bbac542731cd1693a821f7bf5f86ef88a205843108c986c474d	-	ol9_x86_64_appstream
	bind-doc-9.16.23-18.0.1.el9_4.1.noarch.rpm	1365b604d56937e00de87f08d5873387a856b2525ce643bfd23bf2ff86179840	-	ol9_x86_64_codeready_builder
	bind-dyndb-ldap-11.9-9.el9_4.x86_64.rpm	044504d1726f88006e8c74a13a6f8f679922965728dedfbb59e95b70a2d05501	-	ol9_x86_64_appstream
	bind-libs-9.16.23-18.0.1.el9_4.1.i686.rpm	c9f4acb5ca975d27fc62605f846b61e7962d02415c35927891e28c37eb4a3f79	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-18.0.1.el9_4.1.x86_64.rpm	febe1aee692bf7e0693182dadabbb3952ef3b2b2596cebead8096a5ca993e37d	-	ol9_x86_64_appstream
	bind-license-9.16.23-18.0.1.el9_4.1.noarch.rpm	325303199d6415ab0bd4649d591a254e9fa779d838195cf91a35fb08143e6532	-	ol9_x86_64_appstream
	bind-utils-9.16.23-18.0.1.el9_4.1.x86_64.rpm	dfd47eaf32fe0065cfb3e961cc8b8ee87ba9c4ea01072f11b7dc7baaa112d679	-	ol9_x86_64_appstream
	python3-bind-9.16.23-18.0.1.el9_4.1.noarch.rpm	06d5b94ba522d8bce7162f01c987ad84c1927d6c15a65fbaaf6246a108c7761e	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team