ELSA-2024-1781

Описание

[32:9.16.23-0.16.2]

• Prevent crashing at masterformat system test (CVE-2023-6516)

[32:9.16.23-0.16.1]

• Prevent increased CPU load on large DNS messages (CVE-2023-4408)
• Prevent assertion failure when nxdomain-redirect is used with RFC 1918 reverse zones (CVE-2023-5517)
• Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
• Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
• Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868)
• Import tests for large DNS messages fix
• Add downstream change complementing CVE-2023-50387

[32:9.16.23-0.16]

• Limit the amount of recursion possible in control channel (CVE-2023-3341)

[32:9.16.23-0.15]

• Strengten cache cleaning to prevent overflowing configured limit (CVE-2023-2828)