RHSA-2023:4100: Important: bind9.16 security update
Published Jul 17, 2023
·Updated
Important: bind9.16 security update
Other sources
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.Security Fix(es): bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
66 affected componentsFixes available
redhat/bind9.16<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-chroot<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-debugsource<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-dnssec-utils<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-dnssec-utils-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-libs<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-libs-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-license<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-utils<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-utils-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/python3-bind9.16<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-chroot<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-debugsource<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-dnssec-utils<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-dnssec-utils-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-libs<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-libs-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-utils<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-utils-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-chroot<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-debugsource<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-dnssec-utils<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-dnssec-utils-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-libs<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-libs-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-utils<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-utils-debuginfo<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
redhat/bind9.16-chroot<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
redhat/bind9.16-debuginfo<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
redhat/bind9.16-debugsource<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
redhat/bind9.16-dnssec-utils<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
redhat/bind9.16-dnssec-utils-debuginfo<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
redhat/bind9.16-libs<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
redhat/bind9.16-libs-debuginfo<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
redhat/bind9.16-utils<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
redhat/bind9.16-utils-debuginfo<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
redhat/bind9.16-devel<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-devel<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-doc<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-devel<9.16.23-0.14.el8_8.1
9.16.23-0.14.el8_8.1
redhat/bind9.16-devel<9.16.23-0.14.el8_8.1.aa
9.16.23-0.14.el8_8.1.aa
Red Hat Red Hat CodeReady Linux Builder for ARM 64
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat CodeReady Linux Builder for x86_64
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems
Remediation
Event History
Jul 17, 2023
Advisory Published
08:08 AM
Jan 27, 2024
Advisory Published
via Red Hat·11:45 PM
Frequently Asked Questions
1
What is the severity of RHSA-2023:4100?
The severity of RHSA-2023:4100 is classified as Important.
2
How do I fix RHSA-2023:4100?
To fix RHSA-2023:4100, update to bind9.16 version 9.16.23-0.14.el8_8.1 or later.
3
Which products are affected by RHSA-2023:4100?
RHSA-2023:4100 affects multiple Red Hat products including Red Hat Enterprise Linux for x86_64 and ARM 64.
4
What type of vulnerability is described in RHSA-2023:4100?
RHSA-2023:4100 describes a security vulnerability in the BIND 9.16 package.
5
Is there a specific Red Hat package I need to update for RHSA-2023:4100?
Yes, you need to update the bind9.16 package to version 9.16.23-0.14.el8_8.1.