Headline
RHSA-2023:4037: Red Hat Security Advisory: bind9.16 security update
An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Related CVEs:
- CVE-2023-2828: A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly.
Synopsis
Important: bind9.16 security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
View affected systems
Topic
An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Security Fix(es):
- bind: named’s configured cache size limit can be significantly exceeded (CVE-2023-2828)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
- Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
- Red Hat Enterprise Linux Server - AUS 8.6 x86_64
- Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
- Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
- Red Hat Enterprise Linux Server - TUS 8.6 x86_64
- Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
- Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
- Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
- Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.6 x86_64
- Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.6 ppc64le
- Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.6 s390x
- Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.6 aarch64
Fixes
- BZ - 2216227 - CVE-2023-2828 bind: named’s configured cache size limit can be significantly exceeded
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6
SRPM
bind9.16-9.16.23-0.7.el8_6.2.src.rpm
SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d
x86_64
bind9.16-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: ceed7adbbe635958ccf14ec74f5f24b6251fa8ef3e4393647ed9afda4e54b1e5
bind9.16-chroot-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 5567ea55b19a8c2e7ef7e31177da1eb3695b8ff3d2ca11ea90c4eacc10656a89
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 6041288941118d94a43e9350d5c62e0a3ccf75a3886df2f4b3854d202746056e
bind9.16-debugsource-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 5a5636f2a36f1c329ddba9a0f5ec1b3b6be757b89bd99b6af750c4c4de5bd068
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 0059f254397ae4c46babc74ab0c7b59bc8d53318a7d081970cb502a2ed4e5523
bind9.16-libs-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: f53b5092b65863ae208f337c543b76ed7c7526337e346bfc31597d0be0cfa1a8
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: de41a01486b851f1b9d55538f7f3469a0d8051c34a89efaac222135d704676ff
bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01
bind9.16-utils-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 3a8fb8896533980a3bf7ce8373be977fe6f7bca7972872df0b27a19ac28b78b4
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: d560e0c7948ac0bec45751e9aebb4b4ba308703cf2b5aa99243e1073bc7c65fc
Red Hat Enterprise Linux Server - AUS 8.6
SRPM
bind9.16-9.16.23-0.7.el8_6.2.src.rpm
SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d
x86_64
bind9.16-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: ceed7adbbe635958ccf14ec74f5f24b6251fa8ef3e4393647ed9afda4e54b1e5
bind9.16-chroot-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 5567ea55b19a8c2e7ef7e31177da1eb3695b8ff3d2ca11ea90c4eacc10656a89
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 6041288941118d94a43e9350d5c62e0a3ccf75a3886df2f4b3854d202746056e
bind9.16-debugsource-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 5a5636f2a36f1c329ddba9a0f5ec1b3b6be757b89bd99b6af750c4c4de5bd068
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 0059f254397ae4c46babc74ab0c7b59bc8d53318a7d081970cb502a2ed4e5523
bind9.16-libs-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: f53b5092b65863ae208f337c543b76ed7c7526337e346bfc31597d0be0cfa1a8
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: de41a01486b851f1b9d55538f7f3469a0d8051c34a89efaac222135d704676ff
bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01
bind9.16-utils-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 3a8fb8896533980a3bf7ce8373be977fe6f7bca7972872df0b27a19ac28b78b4
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: d560e0c7948ac0bec45751e9aebb4b4ba308703cf2b5aa99243e1073bc7c65fc
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6
SRPM
bind9.16-9.16.23-0.7.el8_6.2.src.rpm
SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d
s390x
bind9.16-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: d5d7632056a15ad11a26d4e18e738aee53e8c34789f9fac9c8c1dbfca6a42b74
bind9.16-chroot-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: a74224f3e4126b09ca5d7ec361a5cbef39e021d8a1513b333f949532b7f1ca5e
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 4238f754d9850743e22fd794b3edd20065edea37916838b3faef2e34149b7f56
bind9.16-debugsource-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 99871b5afbe3fb7579d038dadd449dd48f9795ec3340674e9d3a594a8e9fb150
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 8004db9937e569d7d1173983847272df4066f0c26391588d7f8a885a8315bdd6
bind9.16-libs-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: ef33228d950775bb77eb13959ef11e14d1f53862e1cb0c527f3802a4a28e50c6
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 67529b3a80ca246cf4fce6a83cd42ae74758db630146cb664164cf697a6cee65
bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01
bind9.16-utils-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 6f2a150f47a163610ecb5e79d9ac173c2ba0dd03664dc8959b9fdd944f4cf2bf
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 3fbf2e57f2673ee1fef2850c3692be99cc79a8443f9142cd649da762ede105e2
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6
SRPM
bind9.16-9.16.23-0.7.el8_6.2.src.rpm
SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d
ppc64le
bind9.16-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: d8bc9d9f063450254e4e969e9d17080bd02cc86a1a6f856322b0709208966873
bind9.16-chroot-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 16d22184d586dcd00612d7856f772e7cdd562986a2629c82743515f8a3faf950
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: d1240523b345524a672016f51331bb70ecac66677fc63885306b457fb47e1cea
bind9.16-debugsource-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 4802a0d0c39e38884f2d81add94737dfffa54fff7de6c8fbb122aaa4c883401f
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 2b9ebede14ea889a41a548cea53fdd62350f641e6c807977b3b41480ff9581c8
bind9.16-libs-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 5b1003004230e15b70434ce9117ac6438ef8f69e75f4deeba97021ba8bc2affd
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 27f079e780a1e334b609886a8cc7344e8f4feb9deb9e9a38bc064cec0e47a7cd
bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01
bind9.16-utils-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 637126552e109dcfaf8aa1b3f27a1b3081e0a87d0ded3ab5b193ca1f76f50625
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: d45379c5975568c6f0d8e4fdecb0d1f88e4179fcf97c3d48930741fc8912b3a1
Red Hat Enterprise Linux Server - TUS 8.6
SRPM
bind9.16-9.16.23-0.7.el8_6.2.src.rpm
SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d
x86_64
bind9.16-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: ceed7adbbe635958ccf14ec74f5f24b6251fa8ef3e4393647ed9afda4e54b1e5
bind9.16-chroot-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 5567ea55b19a8c2e7ef7e31177da1eb3695b8ff3d2ca11ea90c4eacc10656a89
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 6041288941118d94a43e9350d5c62e0a3ccf75a3886df2f4b3854d202746056e
bind9.16-debugsource-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 5a5636f2a36f1c329ddba9a0f5ec1b3b6be757b89bd99b6af750c4c4de5bd068
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 0059f254397ae4c46babc74ab0c7b59bc8d53318a7d081970cb502a2ed4e5523
bind9.16-libs-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: f53b5092b65863ae208f337c543b76ed7c7526337e346bfc31597d0be0cfa1a8
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: de41a01486b851f1b9d55538f7f3469a0d8051c34a89efaac222135d704676ff
bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01
bind9.16-utils-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 3a8fb8896533980a3bf7ce8373be977fe6f7bca7972872df0b27a19ac28b78b4
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: d560e0c7948ac0bec45751e9aebb4b4ba308703cf2b5aa99243e1073bc7c65fc
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6
SRPM
bind9.16-9.16.23-0.7.el8_6.2.src.rpm
SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d
aarch64
bind9.16-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: 13239f1e0aad4ea5d08f3dccfc61d4868f1e45f057183ded2a53281b9d1825b3
bind9.16-chroot-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: e6bd0668b5ab12e88e32774f65a7dfcada29deb8cade703f4ae581933b91f0b4
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: b8ddb2d9e9d4f509e8bae3da599335d5032b920d0db6ff336ea374a8cd68a522
bind9.16-debugsource-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: 56467e616fc617765ee1cc4bf9e89521c2ce3e33a6c8f7f8fc640071c94b2f65
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: 0313a028dc7e2375ce7fe9a10f1b12cc4bd516312aefacee3fcfa244f823b019
bind9.16-libs-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: 341ef006b94f78ea7d383769c485b1aae3a4cf1765cc5831bd9aef8d551b9dad
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: ca136f406e66ffd55a2a3c105933b9cc58c263c6deaf0b585a69c12a7d2f9c45
bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01
bind9.16-utils-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: afbdcc2490889c86205924aca1bbebf53c3887b9e60df14f38ae4427408e1b58
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: 35aff18d6a0da33248e458427e9b9bfc521889ad76d363d77243e71b07b72a83
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6
SRPM
bind9.16-9.16.23-0.7.el8_6.2.src.rpm
SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d
ppc64le
bind9.16-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: d8bc9d9f063450254e4e969e9d17080bd02cc86a1a6f856322b0709208966873
bind9.16-chroot-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 16d22184d586dcd00612d7856f772e7cdd562986a2629c82743515f8a3faf950
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: d1240523b345524a672016f51331bb70ecac66677fc63885306b457fb47e1cea
bind9.16-debugsource-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 4802a0d0c39e38884f2d81add94737dfffa54fff7de6c8fbb122aaa4c883401f
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 2b9ebede14ea889a41a548cea53fdd62350f641e6c807977b3b41480ff9581c8
bind9.16-libs-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 5b1003004230e15b70434ce9117ac6438ef8f69e75f4deeba97021ba8bc2affd
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 27f079e780a1e334b609886a8cc7344e8f4feb9deb9e9a38bc064cec0e47a7cd
bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01
bind9.16-utils-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 637126552e109dcfaf8aa1b3f27a1b3081e0a87d0ded3ab5b193ca1f76f50625
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: d45379c5975568c6f0d8e4fdecb0d1f88e4179fcf97c3d48930741fc8912b3a1
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6
SRPM
bind9.16-9.16.23-0.7.el8_6.2.src.rpm
SHA-256: ebfd4e8ede8bcbb6a7bf6cdfb7afa7156bc39554a5165b312aed8ce4ce321f3d
x86_64
bind9.16-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: ceed7adbbe635958ccf14ec74f5f24b6251fa8ef3e4393647ed9afda4e54b1e5
bind9.16-chroot-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 5567ea55b19a8c2e7ef7e31177da1eb3695b8ff3d2ca11ea90c4eacc10656a89
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 6041288941118d94a43e9350d5c62e0a3ccf75a3886df2f4b3854d202746056e
bind9.16-debugsource-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 5a5636f2a36f1c329ddba9a0f5ec1b3b6be757b89bd99b6af750c4c4de5bd068
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 0059f254397ae4c46babc74ab0c7b59bc8d53318a7d081970cb502a2ed4e5523
bind9.16-libs-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: f53b5092b65863ae208f337c543b76ed7c7526337e346bfc31597d0be0cfa1a8
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: de41a01486b851f1b9d55538f7f3469a0d8051c34a89efaac222135d704676ff
bind9.16-license-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 6c6def498be6f81812a4f7a2947bf5e68856be962466153ec17d0931c5ebcb01
bind9.16-utils-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 3a8fb8896533980a3bf7ce8373be977fe6f7bca7972872df0b27a19ac28b78b4
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: d560e0c7948ac0bec45751e9aebb4b4ba308703cf2b5aa99243e1073bc7c65fc
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.6
SRPM
x86_64
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.i686.rpm
SHA-256: 48ec3938167f874d95ccf6a543367b2518838178c637e205affb7a4b78b666fa
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 6041288941118d94a43e9350d5c62e0a3ccf75a3886df2f4b3854d202746056e
bind9.16-debugsource-9.16.23-0.7.el8_6.2.i686.rpm
SHA-256: d7f757bbcdf656667432dc8e25d53731bec1a8d120cc0dca09d5d803dc97e1ef
bind9.16-debugsource-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 5a5636f2a36f1c329ddba9a0f5ec1b3b6be757b89bd99b6af750c4c4de5bd068
bind9.16-devel-9.16.23-0.7.el8_6.2.i686.rpm
SHA-256: 93bcd7eadc029388cc57b6e96e0f6cfc51d1e4afb2dd7e04a189e262dac315dc
bind9.16-devel-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: a2d8a28479b018d2c5701bdbe521ab97e27499cda9975c83161908c96878e1e4
bind9.16-dnssec-utils-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 0ed7961bbd6e4fe612f5b8a6bc40f63d7702f8c2a1dc6ffa0875161d73062851
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.i686.rpm
SHA-256: 1aaad98f063bed25c3aca3bfc8e12806ca88636e9d6557892573b13dd3aa892a
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: 0059f254397ae4c46babc74ab0c7b59bc8d53318a7d081970cb502a2ed4e5523
bind9.16-doc-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 9b1792a5c42508db348147c2b9dc061d5cf60fc91e266be9a88243518458cf98
bind9.16-libs-9.16.23-0.7.el8_6.2.i686.rpm
SHA-256: e9406234985fc6e1144263695df1394f8037c795f3a11740170f601a6d7a46e0
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.i686.rpm
SHA-256: 706d3a424e142dec2ca37552052300941c7e6f850320f978e08c64b72b8c969e
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: de41a01486b851f1b9d55538f7f3469a0d8051c34a89efaac222135d704676ff
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.i686.rpm
SHA-256: b76abe787365436687d167f87cc5c51a33ee5d0c433d8278e8df05ae2a420e84
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.x86_64.rpm
SHA-256: d560e0c7948ac0bec45751e9aebb4b4ba308703cf2b5aa99243e1073bc7c65fc
python3-bind9.16-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: fd7a4d39aa5a49fb904644908983ced0b6816695f01175c265af156f8dbad2cb
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.6
SRPM
ppc64le
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: d1240523b345524a672016f51331bb70ecac66677fc63885306b457fb47e1cea
bind9.16-debugsource-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 4802a0d0c39e38884f2d81add94737dfffa54fff7de6c8fbb122aaa4c883401f
bind9.16-devel-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 2eb702ae73b4ccd6216686e1693b69b589394062b05ab64a0a2b61c5d4552fd6
bind9.16-dnssec-utils-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 6741eea320261bef497fe4377e000e81ceda1cde3a3caf789a0a8409c9fb7e11
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 2b9ebede14ea889a41a548cea53fdd62350f641e6c807977b3b41480ff9581c8
bind9.16-doc-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 9b1792a5c42508db348147c2b9dc061d5cf60fc91e266be9a88243518458cf98
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: 27f079e780a1e334b609886a8cc7344e8f4feb9deb9e9a38bc064cec0e47a7cd
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.ppc64le.rpm
SHA-256: d45379c5975568c6f0d8e4fdecb0d1f88e4179fcf97c3d48930741fc8912b3a1
python3-bind9.16-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: fd7a4d39aa5a49fb904644908983ced0b6816695f01175c265af156f8dbad2cb
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.6
SRPM
s390x
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 4238f754d9850743e22fd794b3edd20065edea37916838b3faef2e34149b7f56
bind9.16-debugsource-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 99871b5afbe3fb7579d038dadd449dd48f9795ec3340674e9d3a594a8e9fb150
bind9.16-devel-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 54667b98f9b78bf765c2ae04934b62a91ec02807a9c05c06d8319a887808aeab
bind9.16-dnssec-utils-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: d7d9762e596a4300ae429ae9a0bfdb935490e1805197b42d315198341e5d4543
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 8004db9937e569d7d1173983847272df4066f0c26391588d7f8a885a8315bdd6
bind9.16-doc-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 9b1792a5c42508db348147c2b9dc061d5cf60fc91e266be9a88243518458cf98
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 67529b3a80ca246cf4fce6a83cd42ae74758db630146cb664164cf697a6cee65
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.s390x.rpm
SHA-256: 3fbf2e57f2673ee1fef2850c3692be99cc79a8443f9142cd649da762ede105e2
python3-bind9.16-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: fd7a4d39aa5a49fb904644908983ced0b6816695f01175c265af156f8dbad2cb
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.6
SRPM
aarch64
bind9.16-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: b8ddb2d9e9d4f509e8bae3da599335d5032b920d0db6ff336ea374a8cd68a522
bind9.16-debugsource-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: 56467e616fc617765ee1cc4bf9e89521c2ce3e33a6c8f7f8fc640071c94b2f65
bind9.16-devel-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: 0eea992ada1f8ac6e40d52baeb0a9058afdf3bfa34ebfe67cd42091b5eb70802
bind9.16-dnssec-utils-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: 24be5583cc2e8ed1578f55924dfb30b0bf0b31058f1e7f12e44f672344b03117
bind9.16-dnssec-utils-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: 0313a028dc7e2375ce7fe9a10f1b12cc4bd516312aefacee3fcfa244f823b019
bind9.16-doc-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: 9b1792a5c42508db348147c2b9dc061d5cf60fc91e266be9a88243518458cf98
bind9.16-libs-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: ca136f406e66ffd55a2a3c105933b9cc58c263c6deaf0b585a69c12a7d2f9c45
bind9.16-utils-debuginfo-9.16.23-0.7.el8_6.2.aarch64.rpm
SHA-256: 35aff18d6a0da33248e458427e9b9bfc521889ad76d363d77243e71b07b72a83
python3-bind9.16-9.16.23-0.7.el8_6.2.noarch.rpm
SHA-256: fd7a4d39aa5a49fb904644908983ced0b6816695f01175c265af156f8dbad2cb
Related news
IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 254138
Red Hat Security Advisory 2023-5174-01 - Red Hat OpenShift Service Mesh is the Red Hat distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. This advisory covers container images for the release.
An update is now available for Red Hat OpenShift GitOps 1.9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-40029: A flaw was found in the ArgoCD package, used by Red Hat GitOps, that allows cluster secrets to be managed declaratively using the `kubectl apply` functionality, resulting in the full secret body being stored in `kubectl.kubernetes.io/last-applied-configuration` annotation. Since ArgoCD has included the ability to manage cluster labels and annotations via i...
Red Hat Security Advisory 2023-4893-01 - The Migration Toolkit for Containers enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.
Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.
Multicluster Engine for Kubernetes 2.2.7 General Availability release images, which provide security updates and fix bugs. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-3089: A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated. * CVE-2023-37903: A flaw was found in the vm2 custom inspect function, which allows attackers to escape t...
Red Hat Security Advisory 2023-4627-01 - Migration Toolkit for Applications 6.2.0 Images. Issues addressed include a denial of service vulnerability.
Red Hat Security Advisory 2023-4421-01 - OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization 4.12.5 images.
Red Hat OpenShift Container Platform release 4.11.46 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-38561: A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows a...
Red Hat Security Advisory 2023-4332-01 - An update for bind is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important.
Red Hat OpenShift Container Platform release 4.13.6 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41723: A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
Red Hat Security Advisory 2023-4154-01 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly.
Red Hat Security Advisory 2023-4152-01 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly.
Red Hat Security Advisory 2023-4100-01 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly.
An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-2828: A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly.
An update for bind is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-2828: A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, ef...
An update for bind is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-2828: A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly.
Red Hat Security Advisory 2023-4037-01 - An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Security Advisory 2023-4005-02 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly.
An update for bind is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-2828: A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly.
Debian Linux Security Advisory 5439-1 - Several vulnerabilities were discovered in BIND, a DNS server implementation.
The U.S. Cybersecurity and Infrastructure Security Agency has added a batch of six flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. This comprises three vulnerabilities that Apple patched this week (CVE-2023-32434, CVE-2023-32435, and CVE-2023-32439), two flaws in VMware (CVE-2023-20867 and CVE-2023-20887), and one shortcoming impacting Zyxel
Ubuntu Security Notice 6183-1 - Shoham Danino, Anat Bremler-Barr, Yehuda Afek, and Yuval Shavitt discovered that Bind incorrectly handled the cache size limit. A remote attacker could possibly use this issue to consume memory, leading to a denial of service. It was discovered that Bind incorrectly handled the recursive-clients quota. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 22.10, and Ubuntu 23.04.
Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the configuration file; it defaults to 90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets from the cache, to keep memory use below the configured limit. It has been discovered that the effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size` limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0 through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9...