Oracle Linux Security Advisory ELSA-2024-0965

https://linux.oracle.com/errata/ELSA-2024-0965.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
python3-unbound-1.16.2-5.el8_9.2.x86_64.rpm
unbound-1.16.2-5.el8_9.2.x86_64.rpm
unbound-devel-1.16.2-5.el8_9.2.i686.rpm
unbound-devel-1.16.2-5.el8_9.2.x86_64.rpm
unbound-libs-1.16.2-5.el8_9.2.i686.rpm
unbound-libs-1.16.2-5.el8_9.2.x86_64.rpm

aarch64:
python3-unbound-1.16.2-5.el8_9.2.aarch64.rpm
unbound-1.16.2-5.el8_9.2.aarch64.rpm
unbound-devel-1.16.2-5.el8_9.2.aarch64.rpm
unbound-libs-1.16.2-5.el8_9.2.aarch64.rpm


SRPMS:
https://oss.oracle.com:443/ol8/SRPMS-updates//unbound-1.16.2-5.el8_9.2.src.rpm

Related CVEs:

CVE-2023-50387
CVE-2023-50868




Description of changes:

[1.16.2-5.2]
- bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator
  (CVE-2023-50387)
- bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
  (CVE-2023-50868)


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle8: ELSA-2024-0965: unbound security Important Security Update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[1.16.2-5.2] - bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) - bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates//unbound-1.16.2-5.el8_9.2.src.rpm

x86_64

python3-unbound-1.16.2-5.el8_9.2.x86_64.rpm unbound-1.16.2-5.el8_9.2.x86_64.rpm unbound-devel-1.16.2-5.el8_9.2.i686.rpm unbound-devel-1.16.2-5.el8_9.2.x86_64.rpm unbound-libs-1.16.2-5.el8_9.2.i686.rpm unbound-libs-1.16.2-5.el8_9.2.x86_64.rpm

aarch64

python3-unbound-1.16.2-5.el8_9.2.aarch64.rpm unbound-1.16.2-5.el8_9.2.aarch64.rpm unbound-devel-1.16.2-5.el8_9.2.aarch64.rpm unbound-libs-1.16.2-5.el8_9.2.aarch64.rpm

i386

Severity
Related CVEs: CVE-2023-50387 CVE-2023-50868

Related News