--===============0083596371950716284==

-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2024-ef8a7031e7
2024-08-17 01:50:55.915304
-------------------------------------------------------------------------------
-

Name        : bind
Product     : Fedora 39
Version     : 9.18.28
Release     : 2.fc39
URL         : https://www.isc.org/downloads/bind/
Summary     : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System)
 server
Description :
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

-------------------------------------------------------------------------------
-
Update Information:

Update to BIND 9.18.28
Security Fixes
A malicious DNS client that sent many queries over TCP but never read the
responses could cause a server to respond slowly or not at all for other
clients. This has been fixed. (CVE-2024-0760) [GL #4481]
It is possible to craft excessively large resource records sets, which have the
effect of slowing down database processing. This has been addressed by adding a
configurable limit to the number of records that can be stored per name and
 type
in a cache or zone database. The default is 100, which can be tuned with the
 new
max-records-per-type option. [GL #497] [GL #3405]
It is possible to craft excessively large numbers of resource record types for
 a
given owner name, which has the effect of slowing down database processing.
 This
has been addressed by adding a configurable limit to the number of records that
can be stored per name and type in a cache or zone database. The default is
 100,
which can be tuned with the new max-types-per-name option. (CVE-2024-1737) [GL
#3403]
ISC would like to thank Toshifumi Sakaguchi who independently discovered and
responsibly reported the issue to ISC. [GL #4548]
Validating DNS messages signed using the SIG(0) protocol (RFC 2931) could cause
excessive CPU load, leading to a denial-of-service condition. Support for
 SIG(0)
message validation was removed from this version of named. (CVE-2024-1975) [GL
#4480]
Due to a logic error, lookups that triggered serving stale data and required
lookups in local authoritative zone data could have resulted in an assertion
failure. This has been fixed. (CVE-2024-4076) [GL #4507]
Potential data races were found in our DoH implementation, related to HTTP/2
session object management and endpoints set object management after
reconfiguration. These issues have been fixed. [GL #4473]
ISC would like to thank Dzintars and Ivo from nic.lv for bringing this to our
attention.
When looking up the NS records of parent zones as part of looking up DS
 records,
it was possible for named to trigger an assertion failure if serve-stale was
enabled. This has been fixed. [GL #4661]
https://downloads.isc.org/isc/bind9/9.18.28/doc/arm/html/notes.html
-------------------------------------------------------------------------------
-
ChangeLog:

* Wed Jul 31 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.28-2
- Conflict explicitly with more bind subpackages
- Make relative documentation links
* Fri Jul 26 2024 Jonathan Wright <jonathan@almalinux.org> - 32:9.18.28-1
- update to 9.18.28 rhbz#2299467
- Fixes CVE-2024-4076
- Fixes CVE-2024-1975
- Fixes CVE-2024-1737
- Fixes CVE-2024-0760
-------------------------------------------------------------------------------
-
References:

  [ 1 ] Bug #2299467 - bind-9.18.28 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=2299467
-------------------------------------------------------------------------------
-

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-ef8a7031e7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-


--===============0083596371950716284==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

-- 
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
--===============0083596371950716284==--