Security
Headlines
HeadlinesLatestCVEs

Headline

RHSA-2023:4037: Red Hat Security Advisory: bind9.16 security update

An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

  • CVE-2023-2828: A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly.
Red Hat Security Data
#vulnerability#linux#red_hat#ibm#sap

Synopsis

Important: bind9.16 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: named’s configured cache size limit can be significantly exceeded (CVE-2023-2828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.6 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.6 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.6 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.6 aarch64

Fixes

  • BZ - 2216227 - CVE-2023-2828 bind: named’s configured cache size limit can be significantly exceeded

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM

bind9.16-9.16.23-0.7.el8_6.2.src.rpm

SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d

x86_64

bind9.16-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: ceed7adbbe635958ccf14ec74f5f24b6251fa8ef3e4393647ed9afda4e54b1e5

bind9.16-chroot-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 5567ea55b19a8c2e7ef7e31177da1eb3695b8ff3d2ca11ea90c4eacc10656a89

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 6041288941118d94a43e9350d5c62e0a3ccf75a3886df2f4b3854d202746056e

bind9.16-debugsource-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 5a5636f2a36f1c329ddba9a0f5ec1b3b6be757b89bd99b6af750c4c4de5bd068

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 0059f254397ae4c46babc74ab0c7b59bc8d53318a7d081970cb502a2ed4e5523

bind9.16-libs-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: f53b5092b65863ae208f337c543b76ed7c7526337e346bfc31597d0be0cfa1a8

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: de41a01486b851f1b9d55538f7f3469a0d8051c34a89efaac222135d704676ff

bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01

bind9.16-utils-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 3a8fb8896533980a3bf7ce8373be977fe6f7bca7972872df0b27a19ac28b78b4

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: d560e0c7948ac0bec45751e9aebb4b4ba308703cf2b5aa99243e1073bc7c65fc

Red Hat Enterprise Linux Server - AUS 8.6

SRPM

bind9.16-9.16.23-0.7.el8_6.2.src.rpm

SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d

x86_64

bind9.16-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: ceed7adbbe635958ccf14ec74f5f24b6251fa8ef3e4393647ed9afda4e54b1e5

bind9.16-chroot-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 5567ea55b19a8c2e7ef7e31177da1eb3695b8ff3d2ca11ea90c4eacc10656a89

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 6041288941118d94a43e9350d5c62e0a3ccf75a3886df2f4b3854d202746056e

bind9.16-debugsource-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 5a5636f2a36f1c329ddba9a0f5ec1b3b6be757b89bd99b6af750c4c4de5bd068

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 0059f254397ae4c46babc74ab0c7b59bc8d53318a7d081970cb502a2ed4e5523

bind9.16-libs-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: f53b5092b65863ae208f337c543b76ed7c7526337e346bfc31597d0be0cfa1a8

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: de41a01486b851f1b9d55538f7f3469a0d8051c34a89efaac222135d704676ff

bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01

bind9.16-utils-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 3a8fb8896533980a3bf7ce8373be977fe6f7bca7972872df0b27a19ac28b78b4

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: d560e0c7948ac0bec45751e9aebb4b4ba308703cf2b5aa99243e1073bc7c65fc

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM

bind9.16-9.16.23-0.7.el8_6.2.src.rpm

SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d

s390x

bind9.16-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: d5d7632056a15ad11a26d4e18e738aee53e8c34789f9fac9c8c1dbfca6a42b74

bind9.16-chroot-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: a74224f3e4126b09ca5d7ec361a5cbef39e021d8a1513b333f949532b7f1ca5e

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 4238f754d9850743e22fd794b3edd20065edea37916838b3faef2e34149b7f56

bind9.16-debugsource-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 99871b5afbe3fb7579d038dadd449dd48f9795ec3340674e9d3a594a8e9fb150

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 8004db9937e569d7d1173983847272df4066f0c26391588d7f8a885a8315bdd6

bind9.16-libs-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: ef33228d950775bb77eb13959ef11e14d1f53862e1cb0c527f3802a4a28e50c6

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 67529b3a80ca246cf4fce6a83cd42ae74758db630146cb664164cf697a6cee65

bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01

bind9.16-utils-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 6f2a150f47a163610ecb5e79d9ac173c2ba0dd03664dc8959b9fdd944f4cf2bf

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 3fbf2e57f2673ee1fef2850c3692be99cc79a8443f9142cd649da762ede105e2

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM

bind9.16-9.16.23-0.7.el8_6.2.src.rpm

SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d

ppc64le

bind9.16-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: d8bc9d9f063450254e4e969e9d17080bd02cc86a1a6f856322b0709208966873

bind9.16-chroot-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 16d22184d586dcd00612d7856f772e7cdd562986a2629c82743515f8a3faf950

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: d1240523b345524a672016f51331bb70ecac66677fc63885306b457fb47e1cea

bind9.16-debugsource-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 4802a0d0c39e38884f2d81add94737dfffa54fff7de6c8fbb122aaa4c883401f

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 2b9ebede14ea889a41a548cea53fdd62350f641e6c807977b3b41480ff9581c8

bind9.16-libs-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 5b1003004230e15b70434ce9117ac6438ef8f69e75f4deeba97021ba8bc2affd

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 27f079e780a1e334b609886a8cc7344e8f4feb9deb9e9a38bc064cec0e47a7cd

bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01

bind9.16-utils-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 637126552e109dcfaf8aa1b3f27a1b3081e0a87d0ded3ab5b193ca1f76f50625

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: d45379c5975568c6f0d8e4fdecb0d1f88e4179fcf97c3d48930741fc8912b3a1

Red Hat Enterprise Linux Server - TUS 8.6

SRPM

bind9.16-9.16.23-0.7.el8_6.2.src.rpm

SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d

x86_64

bind9.16-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: ceed7adbbe635958ccf14ec74f5f24b6251fa8ef3e4393647ed9afda4e54b1e5

bind9.16-chroot-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 5567ea55b19a8c2e7ef7e31177da1eb3695b8ff3d2ca11ea90c4eacc10656a89

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 6041288941118d94a43e9350d5c62e0a3ccf75a3886df2f4b3854d202746056e

bind9.16-debugsource-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 5a5636f2a36f1c329ddba9a0f5ec1b3b6be757b89bd99b6af750c4c4de5bd068

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 0059f254397ae4c46babc74ab0c7b59bc8d53318a7d081970cb502a2ed4e5523

bind9.16-libs-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: f53b5092b65863ae208f337c543b76ed7c7526337e346bfc31597d0be0cfa1a8

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: de41a01486b851f1b9d55538f7f3469a0d8051c34a89efaac222135d704676ff

bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01

bind9.16-utils-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 3a8fb8896533980a3bf7ce8373be977fe6f7bca7972872df0b27a19ac28b78b4

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: d560e0c7948ac0bec45751e9aebb4b4ba308703cf2b5aa99243e1073bc7c65fc

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM

bind9.16-9.16.23-0.7.el8_6.2.src.rpm

SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d

aarch64

bind9.16-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: 13239f1e0aad4ea5d08f3dccfc61d4868f1e45f057183ded2a53281b9d1825b3

bind9.16-chroot-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: e6bd0668b5ab12e88e32774f65a7dfcada29deb8cade703f4ae581933b91f0b4

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: b8ddb2d9e9d4f509e8bae3da599335d5032b920d0db6ff336ea374a8cd68a522

bind9.16-debugsource-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: 56467e616fc617765ee1cc4bf9e89521c2ce3e33a6c8f7f8fc640071c94b2f65

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: 0313a028dc7e2375ce7fe9a10f1b12cc4bd516312aefacee3fcfa244f823b019

bind9.16-libs-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: 341ef006b94f78ea7d383769c485b1aae3a4cf1765cc5831bd9aef8d551b9dad

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: ca136f406e66ffd55a2a3c105933b9cc58c263c6deaf0b585a69c12a7d2f9c45

bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01

bind9.16-utils-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: afbdcc2490889c86205924aca1bbebf53c3887b9e60df14f38ae4427408e1b58

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: 35aff18d6a0da33248e458427e9b9bfc521889ad76d363d77243e71b07b72a83

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM

bind9.16-9.16.23-0.7.el8_6.2.src.rpm

SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d

ppc64le

bind9.16-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: d8bc9d9f063450254e4e969e9d17080bd02cc86a1a6f856322b0709208966873

bind9.16-chroot-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 16d22184d586dcd00612d7856f772e7cdd562986a2629c82743515f8a3faf950

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: d1240523b345524a672016f51331bb70ecac66677fc63885306b457fb47e1cea

bind9.16-debugsource-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 4802a0d0c39e38884f2d81add94737dfffa54fff7de6c8fbb122aaa4c883401f

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 2b9ebede14ea889a41a548cea53fdd62350f641e6c807977b3b41480ff9581c8

bind9.16-libs-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 5b1003004230e15b70434ce9117ac6438ef8f69e75f4deeba97021ba8bc2affd

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 27f079e780a1e334b609886a8cc7344e8f4feb9deb9e9a38bc064cec0e47a7cd

bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01

bind9.16-utils-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 637126552e109dcfaf8aa1b3f27a1b3081e0a87d0ded3ab5b193ca1f76f50625

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: d45379c5975568c6f0d8e4fdecb0d1f88e4179fcf97c3d48930741fc8912b3a1

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM

bind9.16-9.16.23-0.7.el8_6.2.src.rpm

SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d

x86_64

bind9.16-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: ceed7adbbe635958ccf14ec74f5f24b6251fa8ef3e4393647ed9afda4e54b1e5

bind9.16-chroot-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 5567ea55b19a8c2e7ef7e31177da1eb3695b8ff3d2ca11ea90c4eacc10656a89

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 6041288941118d94a43e9350d5c62e0a3ccf75a3886df2f4b3854d202746056e

bind9.16-debugsource-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 5a5636f2a36f1c329ddba9a0f5ec1b3b6be757b89bd99b6af750c4c4de5bd068

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 0059f254397ae4c46babc74ab0c7b59bc8d53318a7d081970cb502a2ed4e5523

bind9.16-libs-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: f53b5092b65863ae208f337c543b76ed7c7526337e346bfc31597d0be0cfa1a8

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: de41a01486b851f1b9d55538f7f3469a0d8051c34a89efaac222135d704676ff

bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01

bind9.16-utils-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 3a8fb8896533980a3bf7ce8373be977fe6f7bca7972872df0b27a19ac28b78b4

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: d560e0c7948ac0bec45751e9aebb4b4ba308703cf2b5aa99243e1073bc7c65fc

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.6

SRPM

x86_64

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.i686.rpm

SHA-256: 48ec3938167f874d95ccf6a543367b2518838178c637e205affb7a4b78b666fa

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 6041288941118d94a43e9350d5c62e0a3ccf75a3886df2f4b3854d202746056e

bind9.16-debugsource-9.16.23-0.7.el8_6.2.i686.rpm

SHA-256: d7f757bbcdf656667432dc8e25d53731bec1a8d120cc0dca09d5d803dc97e1ef

bind9.16-debugsource-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 5a5636f2a36f1c329ddba9a0f5ec1b3b6be757b89bd99b6af750c4c4de5bd068

bind9.16-devel-9.16.23-0.7.el8_6.2.i686.rpm

SHA-256: 93bcd7eadc029388cc57b6e96e0f6cfc51d1e4afb2dd7e04a189e262dac315dc

bind9.16-devel-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: a2d8a28479b018d2c5701bdbe521ab97e27499cda9975c83161908c96878e1e4

bind9.16-dnssec-utils-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 0ed7961bbd6e4fe612f5b8a6bc40f63d7702f8c2a1dc6ffa0875161d73062851

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.i686.rpm

SHA-256: 1aaad98f063bed25c3aca3bfc8e12806ca88636e9d6557892573b13dd3aa892a

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: 0059f254397ae4c46babc74ab0c7b59bc8d53318a7d081970cb502a2ed4e5523

bind9.16-doc-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 9b1792a5c42508db348147c2b9dc061d5cf60fc91e266be9a88243518458cf98

bind9.16-libs-9.16.23-0.7.el8_6.2.i686.rpm

SHA-256: e9406234985fc6e1144263695df1394f8037c795f3a11740170f601a6d7a46e0

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.i686.rpm

SHA-256: 706d3a424e142dec2ca37552052300941c7e6f850320f978e08c64b72b8c969e

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: de41a01486b851f1b9d55538f7f3469a0d8051c34a89efaac222135d704676ff

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.i686.rpm

SHA-256: b76abe787365436687d167f87cc5c51a33ee5d0c433d8278e8df05ae2a420e84

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm

SHA-256: d560e0c7948ac0bec45751e9aebb4b4ba308703cf2b5aa99243e1073bc7c65fc

python3-bind9.16-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: fd7a4d39aa5a49fb904644908983ced0b6816695f01175c265af156f8dbad2cb

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.6

SRPM

ppc64le

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: d1240523b345524a672016f51331bb70ecac66677fc63885306b457fb47e1cea

bind9.16-debugsource-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 4802a0d0c39e38884f2d81add94737dfffa54fff7de6c8fbb122aaa4c883401f

bind9.16-devel-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 2eb702ae73b4ccd6216686e1693b69b589394062b05ab64a0a2b61c5d4552fd6

bind9.16-dnssec-utils-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 6741eea320261bef497fe4377e000e81ceda1cde3a3caf789a0a8409c9fb7e11

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 2b9ebede14ea889a41a548cea53fdd62350f641e6c807977b3b41480ff9581c8

bind9.16-doc-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 9b1792a5c42508db348147c2b9dc061d5cf60fc91e266be9a88243518458cf98

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: 27f079e780a1e334b609886a8cc7344e8f4feb9deb9e9a38bc064cec0e47a7cd

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm

SHA-256: d45379c5975568c6f0d8e4fdecb0d1f88e4179fcf97c3d48930741fc8912b3a1

python3-bind9.16-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: fd7a4d39aa5a49fb904644908983ced0b6816695f01175c265af156f8dbad2cb

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.6

SRPM

s390x

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 4238f754d9850743e22fd794b3edd20065edea37916838b3faef2e34149b7f56

bind9.16-debugsource-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 99871b5afbe3fb7579d038dadd449dd48f9795ec3340674e9d3a594a8e9fb150

bind9.16-devel-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 54667b98f9b78bf765c2ae04934b62a91ec02807a9c05c06d8319a887808aeab

bind9.16-dnssec-utils-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: d7d9762e596a4300ae429ae9a0bfdb935490e1805197b42d315198341e5d4543

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 8004db9937e569d7d1173983847272df4066f0c26391588d7f8a885a8315bdd6

bind9.16-doc-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 9b1792a5c42508db348147c2b9dc061d5cf60fc91e266be9a88243518458cf98

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 67529b3a80ca246cf4fce6a83cd42ae74758db630146cb664164cf697a6cee65

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm

SHA-256: 3fbf2e57f2673ee1fef2850c3692be99cc79a8443f9142cd649da762ede105e2

python3-bind9.16-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: fd7a4d39aa5a49fb904644908983ced0b6816695f01175c265af156f8dbad2cb

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.6

SRPM

aarch64

bind9.16-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: b8ddb2d9e9d4f509e8bae3da599335d5032b920d0db6ff336ea374a8cd68a522

bind9.16-debugsource-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: 56467e616fc617765ee1cc4bf9e89521c2ce3e33a6c8f7f8fc640071c94b2f65

bind9.16-devel-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: 0eea992ada1f8ac6e40d52baeb0a9058afdf3bfa34ebfe67cd42091b5eb70802

bind9.16-dnssec-utils-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: 24be5583cc2e8ed1578f55924dfb30b0bf0b31058f1e7f12e44f672344b03117

bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: 0313a028dc7e2375ce7fe9a10f1b12cc4bd516312aefacee3fcfa244f823b019

bind9.16-doc-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: 9b1792a5c42508db348147c2b9dc061d5cf60fc91e266be9a88243518458cf98

bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: ca136f406e66ffd55a2a3c105933b9cc58c263c6deaf0b585a69c12a7d2f9c45

bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm

SHA-256: 35aff18d6a0da33248e458427e9b9bfc521889ad76d363d77243e71b07b72a83

python3-bind9.16-9.16.23-0.7.el8_6.2.noarch.rpm

SHA-256: fd7a4d39aa5a49fb904644908983ced0b6816695f01175c265af156f8dbad2cb

Related news

CVE-2023-30994: Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities

IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 254138

Red Hat Security Advisory 2023-5174-01

Red Hat Security Advisory 2023-5174-01 - Red Hat OpenShift Service Mesh is the Red Hat distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. This advisory covers container images for the release.

RHSA-2023:5029: Red Hat Security Advisory: Red Hat OpenShift GitOps security update

An update is now available for Red Hat OpenShift GitOps 1.9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-40029: A flaw was found in the ArgoCD package, used by Red Hat GitOps, that allows cluster secrets to be managed declaratively using the `kubectl apply` functionality, resulting in the full secret body being stored in `kubectl.kubernetes.io/last-applied-configuration` annotation. Since ArgoCD has included the ability to manage cluster labels and annotations via i...

Red Hat Security Advisory 2023-4893-01

Red Hat Security Advisory 2023-4893-01 - The Migration Toolkit for Containers enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.

CVE-2023-37249: NIOS is vulnerable to CVE-2023-37249

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.

RHSA-2023:4650: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.2.7 security updates and bug fixes

Multicluster Engine for Kubernetes 2.2.7 General Availability release images, which provide security updates and fix bugs. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-3089: A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated. * CVE-2023-37903: A flaw was found in the vm2 custom inspect function, which allows attackers to escape t...

Red Hat Security Advisory 2023-4627-01

Red Hat Security Advisory 2023-4627-01 - Migration Toolkit for Applications 6.2.0 Images. Issues addressed include a denial of service vulnerability.

Red Hat Security Advisory 2023-4421-01

Red Hat Security Advisory 2023-4421-01 - OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization 4.12.5 images.

RHSA-2023:4310: Red Hat Security Advisory: OpenShift Container Platform 4.11.46 security update

Red Hat OpenShift Container Platform release 4.11.46 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-38561: A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows a...

Red Hat Security Advisory 2023-4332-01

Red Hat Security Advisory 2023-4332-01 - An update for bind is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important.

RHSA-2023:4225: Red Hat Security Advisory: OpenShift Container Platform 4.13.6 security and extras update

Red Hat OpenShift Container Platform release 4.13.6 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41723: A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

Red Hat Security Advisory 2023-4154-01

Red Hat Security Advisory 2023-4154-01 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly.

Red Hat Security Advisory 2023-4152-01

Red Hat Security Advisory 2023-4152-01 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly.

Red Hat Security Advisory 2023-4100-01

Red Hat Security Advisory 2023-4100-01 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly.

RHSA-2023:4152: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-2828: A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly.

RHSA-2023:4153: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-2828: A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, ef...

RHSA-2023:4154: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-2828: A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly.

Red Hat Security Advisory 2023-4037-01

Red Hat Security Advisory 2023-4037-01 - An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.

Red Hat Security Advisory 2023-4005-02

Red Hat Security Advisory 2023-4005-02 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly.

RHSA-2023:4005: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-2828: A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly.

Debian Security Advisory 5439-1

Debian Linux Security Advisory 5439-1 - Several vulnerabilities were discovered in BIND, a DNS server implementation.

U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency has added a batch of six flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. This comprises three vulnerabilities that Apple patched this week (CVE-2023-32434, CVE-2023-32435, and CVE-2023-32439), two flaws in VMware (CVE-2023-20867 and CVE-2023-20887), and one shortcoming impacting Zyxel

Ubuntu Security Notice USN-6183-1

Ubuntu Security Notice 6183-1 - Shoham Danino, Anat Bremler-Barr, Yehuda Afek, and Yuval Shavitt discovered that Bind incorrectly handled the cache size limit. A remote attacker could possibly use this issue to consume memory, leading to a denial of service. It was discovered that Bind incorrectly handled the recursive-clients quota. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10, and Ubuntu 23.04.

CVE-2023-2828: CVE-2023-2828

Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the configuration file; it defaults to 90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets from the cache, to keep memory use below the configured limit. It has been discovered that the effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size` limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0 through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9...