Summary
[32:9.11.36-16.2]
- Rebuild after CI change
[32:9.11.36-16.1]
- Resolve CVE-2024-1975
- Resolve CVE-2024-1737
- Add ability to change runtime limits for max types and records per name
[32:9.11.36-16]
- Ensure incompatible dhcp is not accepted
[32:9.11.36-15]
- Ensure incompatible bind-dyndb-ldap is not accepted
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bind | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-chroot | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-devel | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-export-devel | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-export-libs | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-libs | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-libs-lite | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-license | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-lite-devel | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-pkcs11 | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-pkcs11-devel | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-pkcs11-libs | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-pkcs11-utils | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-sdb | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-sdb-chroot | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | bind-utils | 32:9.11.36-16.el8_10.2 |
| Oracle Linux · 8 | python3-bind | 32:9.11.36-16.el8_10.2 |
Vulnerabilities 2
-
High 7.5
BIND's database will be slow if a very large number of RRs exist at the same name
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This iss…
-
High 7.5
SIG(0) can be used to exhaust CPU resources
If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests. This issue aff…