rpms/bind9-next
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

merge into: rpms:rawhide
Branches Tags
rpms:rawhide
rpms:f45
rpms:main
rpms:f43
rpms:f44
rpms:f42
rpms:f40
rpms:f41
rpms:f38
rpms:f39
rpms:f37
rpms:f36
rpms:epel9
...
pull from: rpms:f39
Branches Tags
rpms:f45
rpms:main
rpms:rawhide
rpms:f43
rpms:f44
rpms:f42
rpms:f40
rpms:f41
rpms:f38
rpms:f39
rpms:f37
rpms:f36
rpms:epel9
Sign in to create a new pull request.

2 commits
rawhide ... f39

Author SHA1 Message Date
Petr Menšík
a7a5db6c7e Update to 9.19.22 (rhbz#2270475) 
https://downloads.isc.org/isc/bind9/9.19.22/doc/arm/html/notes.html#notes-for-bind-9-19-22
 2024-04-15 21:25:47 +02:00
Petr Menšík
82ffef3c36 Update to 9.19.21 (#2264048) 
https://downloads.isc.org/isc/bind9/9.19.21/RELEASE-NOTES-bind-9.19.21.html

Security Fixes

- Validating DNS messages containing a lot of DNSSEC signatures could cause
  excessive CPU load, leading to a denial-of-service condition. This has
  been fixed. (CVE-2023-50387)

  ISC would like to thank Elias Heftrig, Haya Schulmann, Niklas Vogel, and
  Michael Waidner from the German National Research Center for Applied
  Cybersecurity ATHENE for bringing this vulnerability to our attention. [GL #4424]

- Parsing DNS messages with many different names could cause excessive CPU load.
  This has been fixed. (CVE-2023-4408)

  ISC would like to thank Shoham Danino from Reichman University, Anat Bremler-Barr
  from Tel-Aviv University, Yehuda Afek from Tel-Aviv University, and Yuval Shavitt
  from Tel-Aviv University for bringing this vulnerability to our attention. [GL #4234]

- Specific queries could cause named to crash with an assertion failure when
  nxdomain-redirect was enabled. This has been fixed. (CVE-2023-5517) [GL #4281]

- A bad interaction between DNS64 and serve-stale could cause named to crash with an
  assertion failure, when both of these features were enabled. This has been fixed.
  (CVE-2023-5679) [GL #4334]

Resolves: CVE-2023-50387 CVE-2023-4408 CVE-2023-5517 CVE-2023-5679
 2024-02-17 03:11:50 +01:00
3 changed files with 7 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.gitignore vendored
View file

@ -218,3 +218,7 @@ bind-9.7.2b1.tar.gz
/bind-9.19.18.tar.xz.asc
/bind-9.19.19.tar.xz
/bind-9.19.19.tar.xz.asc
/bind-9.19.21.tar.xz
/bind-9.19.21.tar.xz.asc
/bind-9.19.22.tar.xz
/bind-9.19.22.tar.xz.asc

2
bind9-next.spec
View file

@ -52,7 +52,7 @@ Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
Name: bind9-next
License: MPL-2.0 AND ISC AND BSD-3-clause AND Expat AND BSD-2-clause
#
Version: 9.19.19
Version: 9.19.22
Release: %autorelease
Epoch: 32
Url: https://www.isc.org/downloads/bind/

4
sources
View file

@ -1,2 +1,2 @@
SHA512 (bind-9.19.19.tar.xz) = 51ce55bade3a9b239d0ab21d19a0870b91aba1e4c93050f89f1940d322319521631b3b0389eaf5f03e3fc110852e11549365b0efa92536bf5d835510d73c1aa6
SHA512 (bind-9.19.19.tar.xz.asc) = 3217a33be6a885bb42ca972e57c21bfe3000b7cfeaede72aa302750ce9643d4820372f4b147e85ce97409bbc500b40d9b8bc82c12fb13c5c0a2d21fad86712f8
SHA512 (bind-9.19.22.tar.xz) = 609f73ab7e34e9ef0e5854a0bf150009c1ae34615c5f8c7fecf0352ea65ce0d92fecc02b918a0b3b90b3c303dad659e4981a97b1413d02724b20a5ed2d1d905f
SHA512 (bind-9.19.22.tar.xz.asc) = 4839365da593ab6b924372019bbb8b8212856116c563e4f9b6d0b03681234fb855b7f3c85766919fac400be7508f7b72bc9d2a3d8496ce9ee21c6b5fb4369cf3