-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-87502c4a93 2023-10-11 01:33:15.490299 --------------------------------------------------------------------------------
Name : bind-dyndb-ldap Product : Fedora 37 Version : 11.10 Release : 17.fc37 URL : https://releases.pagure.org/bind-dyndb-ldap Summary : LDAP back-end plug-in for BIND Description : This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server.
-------------------------------------------------------------------------------- Update Information:
# BIND 9.18.19 ##Security Fixes - Previously, sending a specially crafted message over the control channel could cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly. This has been fixed. ([CVE-2023-3341](https://access.redhat.com/security/cve/CVE-2023-3341)) - A flaw in the networking code handling DNS-over-TLS queries could cause named to terminate unexpectedly due to an assertion failure under significant DNS-over- TLS query load. This has been fixed. ([CVE-2023-4236](https://access.redhat.com/security/cve/CVE-2023-4236)) - [Upstream release notes](https://downloads.isc.org/isc/bind9/9.18.19/doc/arm/htm l/notes.html#notes-for-bind-9-18-19) -------------------------------------------------------------------------------- ChangeLog:
* Mon Sep 25 2023 Petr Men����k pemensik@redhat.com - 11.10-17 - Support for bind 9.18.19 (#2232346) - Require autoconf-archive at build time -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2232346 - bind-9.18.19 is available https://bugzilla.redhat.com/show_bug.cgi?id=2232346 [ 2 ] Bug #2239874 - CVE-2023-3341 bind: insufficient input validation may lead to DoS [fedora-37] https://bugzilla.redhat.com/show_bug.cgi?id=2239874 [ 3 ] Bug #2239877 - CVE-2023-4236 bind: an assertion failure may lead to DoS [fedora-37] https://bugzilla.redhat.com/show_bug.cgi?id=2239877 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-87502c4a93' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------