ELSA-2024-1789

Описание

bind [32:9.16.23-14.4]

• Rebuild with correct z-stream tag again

[32:9.16.23-14.3]

• Rebuild together with bind-dyndb-ldap to adjust ABI changes

[32:9.16.23-14.2]

• Import tests for large DNS messages fix
• Add downstream change complementing CVE-2023-50387

[32:9.16.23-14.1]

• Prevent increased CPU load on large DNS messages (CVE-2023-4408)
• Prevent assertion failure when nxdomain-redirect is used with RFC 1918 reverse zones (CVE-2023-5517)
• Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
• Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
• Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868)

bind-dyndb-ldap [11.9-8.3]

• Rebuild with correct z-stream tag again

[11.9-8.2]

• Rebuild required for BIND changes for KeyTrap change (CVE-2023-50387)