gpp_maybe Security update for bind

SUSE-SLE-Module-Basesystem-15-SP6-2024-2810

This update for bind fixes the following issues: - CVE-2024-1737: It is possible to craft excessively large numbers of resource record types for a given owner name, which has the effect of slowing down database processing. This has been addressed by adding a configurable limit to the number of records that can be stored per name and type in a cache or zone database. The default is 100, which can be tuned with the new max-types-per-name option. (bsc#1228256) - CVE-2024-1975: Validating DNS messages signed using the SIG(0) protocol (RFC 2931) could cause excessive CPU load, leading to a denial-of-service condition. Support for SIG(0) message validation was removed from this version of named. (bsc#1228257)

• Release Date
  Aug 7 2024
• References
  Bugzilla: 1228256, 1228257
  CVEs: CVE-2024-1975, CVE-2024-1737
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.6 s390x

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.6-150300.22.47.1 lock src

  libdns1605
  DNS library used by BIND

  9.16.6-150300.22.47.1 lock rpm

  libirs-devel
  Development files for IRS

  9.16.6-150300.22.47.1 lock rpm

  libirs1601
  The BIND Information Retrieval System library

  9.16.6-150300.22.47.1 lock rpm

  libisc1606
  ISC shared library used by BIND

  9.16.6-150300.22.47.1 lock rpm

  libisccfg1600
  Exported ISC configuration shared library

  9.16.6-150300.22.47.1 lock rpm

Basesystem Module 15.6 aarch64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.6-150300.22.47.1 lock src

  libdns1605
  DNS library used by BIND

  9.16.6-150300.22.47.1 lock rpm

  libirs-devel
  Development files for IRS

  9.16.6-150300.22.47.1 lock rpm

  libirs1601
  The BIND Information Retrieval System library

  9.16.6-150300.22.47.1 lock rpm

  libisc1606
  ISC shared library used by BIND

  9.16.6-150300.22.47.1 lock rpm

  libisccfg1600
  Exported ISC configuration shared library

  9.16.6-150300.22.47.1 lock rpm

Basesystem Module 15.6 ppc64le

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.6-150300.22.47.1 lock src

  libdns1605
  DNS library used by BIND

  9.16.6-150300.22.47.1 lock rpm

  libirs-devel
  Development files for IRS

  9.16.6-150300.22.47.1 lock rpm

  libirs1601
  The BIND Information Retrieval System library

  9.16.6-150300.22.47.1 lock rpm

  libisc1606
  ISC shared library used by BIND

  9.16.6-150300.22.47.1 lock rpm

  libisccfg1600
  Exported ISC configuration shared library

  9.16.6-150300.22.47.1 lock rpm

Basesystem Module 15.6 x86_64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.6-150300.22.47.1 lock src

  libdns1605
  DNS library used by BIND

  9.16.6-150300.22.47.1 lock rpm

  libirs-devel
  Development files for IRS

  9.16.6-150300.22.47.1 lock rpm

  libirs1601
  The BIND Information Retrieval System library

  9.16.6-150300.22.47.1 lock rpm

  libisc1606
  ISC shared library used by BIND

  9.16.6-150300.22.47.1 lock rpm

  libisccfg1600
  Exported ISC configuration shared library

  9.16.6-150300.22.47.1 lock rpm