gpp_maybe Security update for bind

SUSE-SLE-Module-Server-Applications-15-SP4-2023-341

This update for bind fixes the following issues: - Updated to version 9.16.37 (jsc#SLE-24600): - CVE-2022-3094: Fixed an issue where a message flood could exhaust all available memory (bsc#1207471). - CVE-2022-3736: Fixed a potential crash upon receiving an RRSIG in configurations with stale cache and stale answers enabled and stale-answer-client-timeout set to a positive value (bsc#1207473). - CVE-2022-3924: Fixed a potential crash upon reaching the recursive-clients soft quota in configurations with stale answers enabled and stale-answer-client-timeout set to a positive value (bsc#1207475).

• Release Date
  Feb 10 2023
• References
  Bugzilla: 1207473, 1207475, 1207471
  CVEs: CVE-2022-3924, CVE-2022-3094, CVE-2022-3736
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.4 ppc64le

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.37-150400.5.17.1 lock rpm lock src

  bind-doc
  BIND documentation

  9.16.37-150400.5.17.1 lock rpm

Server Applications Module 15.4 x86_64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.37-150400.5.17.1 lock rpm lock src

  bind-doc
  BIND documentation

  9.16.37-150400.5.17.1 lock rpm

Server Applications Module 15.4 aarch64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.37-150400.5.17.1 lock rpm lock src

  bind-doc
  BIND documentation

  9.16.37-150400.5.17.1 lock rpm

Server Applications Module 15.4 s390x

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.37-150400.5.17.1 lock rpm lock src

  bind-doc
  BIND documentation

  9.16.37-150400.5.17.1 lock rpm