stable

bind-9.18.16-1.fc37 and bind-dyndb-ldap-11.10-15.fc37

FEDORA-2023-1d526d551c created by pemensik 12 months ago for Fedora 37

Update to BIND 9.18.16

Selected parts from upstream release notes. Visit that for details of bug fixes.

Security Fixes

  • The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. (CVE-2023-2828)

    ISC would like to thank Shoham Danino from Reichman University, Anat Bremler-Barr from Tel-Aviv University, Yehuda Afek from Tel-Aviv University, and Yuval Shavitt from Tel-Aviv University for bringing this vulnerability to our attention. [GL #4055]

  • A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. This has been fixed. (CVE-2023-2911) [GL #4089]

New Features

  • The system test suite can now be executed with pytest (along with pytest-xdist for parallel execution). [GL #3978]

Removed Features

  • TKEY mode 2 (Diffie-Hellman Exchanged Keying) is now deprecated, and will be removed in a future release. A warning will be logged when the tkey-dhkey option is used in named.conf. [GL #3905]

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-1d526d551c

This update's test gating status has been changed to 'waiting'.

12 months ago

This update has been submitted for testing by bodhi.

12 months ago

This update's test gating status has been changed to 'failed'.

12 months ago

This update has been pushed to testing.

12 months ago

This update's test gating status has been changed to 'passed'.

12 months ago
User Icon filiperosset commented & provided feedback 12 months ago
karma

no regressions noted

User Icon mschwarz commented & provided feedback 12 months ago
karma

works on productionsystem

This update can be pushed to stable now if the maintainer wishes

12 months ago
User Icon rdtcustomercare commented & provided feedback 12 months ago
karma

work4me

This update has been submitted for stable by bodhi.

12 months ago

This update has been pushed to stable.

12 months ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
3
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
12 months ago
in testing
12 months ago
in stable
12 months ago
approved
12 months ago
BZ#2216462 bind-9.18.16 is available
0
0
BZ#2216627 TRIAGE-CVE-2023-2828 bind: named's configured cache size limit can be significantly exceeded [fedora-all]
0
0
BZ#2216630 TRIAGE-CVE-2023-2911 bind: Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0 [fedora-all]
0
0

Automated Test Results