gpp_maybe Security update for bind

SUSE-SLE-Module-Server-Applications-15-SP5-2024-574

This update for bind fixes the following issues: Update to release 9.16.48: - CVE-2023-50387: Fixed a denial-of-service caused by DNS messages containing a lot of DNSSEC signatures (bsc#1219823). - CVE-2023-50868: Fixed a denial-of-service caused by NSEC3 closest encloser proof (bsc#1219826). - CVE-2023-4408: Fixed a denial-of-service caused by DNS messages with many different names (bsc#1219851). - CVE-2023-5517: Fixed a possible crash when nxdomain-redirect was enabled (bsc#1219852). - CVE-2023-5679: Fixed a possible crash when bad interaction between DNS64 and serve-stale, when both of these features are enabled (bsc#1219853). - CVE-2023-6516: Fixed excessive memory consumption when continuously trigger the cache database maintenance (bsc#1219854).

• Release Date
  Feb 21 2024
• References
  Bugzilla: 1219852, 1219823, 1219851, 1219826, 1219853, 1219854
  CVEs: CVE-2023-4408, CVE-2023-50387, CVE-2023-6516, CVE-2023-50868, CVE-2023-5517, CVE-2023-5679
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.5 s390x

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.48-150500.8.16.1 lock rpm lock src

  bind-doc
  BIND documentation

  9.16.48-150500.8.16.1 lock rpm

Server Applications Module 15.5 x86_64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.48-150500.8.16.1 lock rpm lock src

  bind-doc
  BIND documentation

  9.16.48-150500.8.16.1 lock rpm

Server Applications Module 15.5 ppc64le

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.48-150500.8.16.1 lock rpm lock src

  bind-doc
  BIND documentation

  9.16.48-150500.8.16.1 lock rpm

Server Applications Module 15.5 aarch64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.48-150500.8.16.1 lock rpm lock src

  bind-doc
  BIND documentation

  9.16.48-150500.8.16.1 lock rpm