[ALSA-2024:5231] bind and bind-dyndb-ldap security update

Severity Important

Affected Packages 15

CVEs 3

bind and bind-dyndb-ldap security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737)
bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975)
bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content (CVE-2024-4076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package	Affected Version
pkg:rpm/almalinux/python3-bind?arch=noarch&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind?arch=x86_64&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind?arch=aarch64&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind-utils?arch=x86_64&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind-utils?arch=aarch64&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind-license?arch=noarch&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind-libs?arch=x86_64&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind-libs?arch=aarch64&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind-dyndb-ldap?arch=x86_64&distro=almalinux-9.4	< 11.9-10.el9_4.alma.1
pkg:rpm/almalinux/bind-dyndb-ldap?arch=aarch64&distro=almalinux-9.4	< 11.9-10.el9_4.alma.1
pkg:rpm/almalinux/bind-dnssec-utils?arch=x86_64&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind-dnssec-utils?arch=aarch64&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind-dnssec-doc?arch=noarch&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind-chroot?arch=x86_64&distro=almalinux-9.4	< 9.16.23-18.el9_4.6
pkg:rpm/almalinux/bind-chroot?arch=aarch64&distro=almalinux-9.4	< 9.16.23-18.el9_4.6

ID

ALSA-2024:5231

Severity

important

URL

https://errata.almalinux.org/ALSA-2024:5231.html

Published

2024-08-15T00:00:00
(4 weeks ago)

Modified

2024-08-28T15:57:37
(2 weeks ago)

Rights

Other Advisories

Source	# ID	URL
RHSA	RHSA-2024:5231	https://access.redhat.com/errata/RHSA-2024:5231
CVE	CVE-2024-1737	https://access.redhat.com/security/cve/CVE-2024-1737
CVE	CVE-2024-1975	https://access.redhat.com/security/cve/CVE-2024-1975
CVE	CVE-2024-4076	https://access.redhat.com/security/cve/CVE-2024-4076
Bugzilla	2298893	https://bugzilla.redhat.com/2298893
Bugzilla	2298901	https://bugzilla.redhat.com/2298901
Bugzilla	2298904	https://bugzilla.redhat.com/2298904
Self	ALSA-2024:5231	https://errata.almalinux.org/9/ALSA-2024-5231.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch
Affected	pkg:rpm/almalinux/python3-bind?arch=noarch&distro=almalinux-9.4	almalinux	python3-bind	< 9.16.23-18.el9_4.6	almalinux-9.4	noarch
Affected	pkg:rpm/almalinux/bind?arch=x86_64&distro=almalinux-9.4	almalinux	bind	< 9.16.23-18.el9_4.6	almalinux-9.4	x86_64
Affected	pkg:rpm/almalinux/bind?arch=aarch64&distro=almalinux-9.4	almalinux	bind	< 9.16.23-18.el9_4.6	almalinux-9.4	aarch64
Affected	pkg:rpm/almalinux/bind-utils?arch=x86_64&distro=almalinux-9.4	almalinux	bind-utils	< 9.16.23-18.el9_4.6	almalinux-9.4	x86_64
Affected	pkg:rpm/almalinux/bind-utils?arch=aarch64&distro=almalinux-9.4	almalinux	bind-utils	< 9.16.23-18.el9_4.6	almalinux-9.4	aarch64
Affected	pkg:rpm/almalinux/bind-license?arch=noarch&distro=almalinux-9.4	almalinux	bind-license	< 9.16.23-18.el9_4.6	almalinux-9.4	noarch
Affected	pkg:rpm/almalinux/bind-libs?arch=x86_64&distro=almalinux-9.4	almalinux	bind-libs	< 9.16.23-18.el9_4.6	almalinux-9.4	x86_64
Affected	pkg:rpm/almalinux/bind-libs?arch=aarch64&distro=almalinux-9.4	almalinux	bind-libs	< 9.16.23-18.el9_4.6	almalinux-9.4	aarch64
Affected	pkg:rpm/almalinux/bind-dyndb-ldap?arch=x86_64&distro=almalinux-9.4	almalinux	bind-dyndb-ldap	< 11.9-10.el9_4.alma.1	almalinux-9.4	x86_64
Affected	pkg:rpm/almalinux/bind-dyndb-ldap?arch=aarch64&distro=almalinux-9.4	almalinux	bind-dyndb-ldap	< 11.9-10.el9_4.alma.1	almalinux-9.4	aarch64
Affected	pkg:rpm/almalinux/bind-dnssec-utils?arch=x86_64&distro=almalinux-9.4	almalinux	bind-dnssec-utils	< 9.16.23-18.el9_4.6	almalinux-9.4	x86_64
Affected	pkg:rpm/almalinux/bind-dnssec-utils?arch=aarch64&distro=almalinux-9.4	almalinux	bind-dnssec-utils	< 9.16.23-18.el9_4.6	almalinux-9.4	aarch64
Affected	pkg:rpm/almalinux/bind-dnssec-doc?arch=noarch&distro=almalinux-9.4	almalinux	bind-dnssec-doc	< 9.16.23-18.el9_4.6	almalinux-9.4	noarch
Affected	pkg:rpm/almalinux/bind-chroot?arch=x86_64&distro=almalinux-9.4	almalinux	bind-chroot	< 9.16.23-18.el9_4.6	almalinux-9.4	x86_64
Affected	pkg:rpm/almalinux/bind-chroot?arch=aarch64&distro=almalinux-9.4	almalinux	bind-chroot	< 9.16.23-18.el9_4.6	almalinux-9.4	aarch64

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date