ELSA-2024-2551

Описание

bind [9.16.23-18.0.1]

• Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.16.23-18.1]

• Rebuild with correct z-stream tag again

[32:9.16.23-18]

• Prevent crashing at masterformat system test (CVE-2023-6516)

[32:9.16.23-17]

• Import tests for large DNS messages fix
• Add downstream change complementing CVE-2023-50387

[32:9.16.23-16]

• Prevent increased CPU load on large DNS messages (CVE-2023-4408)
• Prevent assertion failure when nxdomain-redirect is used with RFC 1918 reverse zones (CVE-2023-5517)
• Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
• Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
• Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868)

bind-dyndb-ldap [11.9-9]

• Rebuild required for BIND changes for KeyTrap change (CVE-2023-50387)