RHSA-2025:1678: Important: bind9.16 security update
Published Feb 19, 2025
·Updated
Important: bind9.16 security update
Other sources
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.Security Fix(es): bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
58 affected componentsFixes available
redhat/bind9.16<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-chroot<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-debugsource<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-dnssec-utils<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-dnssec-utils-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-libs<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-libs-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-license<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-utils<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-utils-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/python3-bind9.16<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-chroot<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-debugsource<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-dnssec-utils<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-dnssec-utils-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-libs<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-libs-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-utils<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-utils-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-chroot<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-debugsource<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-dnssec-utils<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-dnssec-utils-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-libs<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-libs-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-utils<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-utils-debuginfo<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
redhat/bind9.16-chroot<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
redhat/bind9.16-debuginfo<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
redhat/bind9.16-debugsource<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
redhat/bind9.16-dnssec-utils<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
redhat/bind9.16-dnssec-utils-debuginfo<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
redhat/bind9.16-libs<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
redhat/bind9.16-libs-debuginfo<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
redhat/bind9.16-utils<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
redhat/bind9.16-utils-debuginfo<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
redhat/bind9.16-devel<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-devel<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-doc<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-devel<9.16.23-0.14.el8_8.6
9.16.23-0.14.el8_8.6
redhat/bind9.16-devel<9.16.23-0.14.el8_8.6.aa
9.16.23-0.14.el8_8.6.aa
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Remediation
Event History
Feb 19, 2025
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·01:56 PM
Frequently Asked Questions
1
What is the severity of RHSA-2025:1678?
The severity of RHSA-2025:1678 is classified as important.
2
How do I fix RHSA-2025:1678?
To fix RHSA-2025:1678, you should update to bind9.16 version 9.16.23-0.14.el8_8.6 or later.
3
Which software is affected by RHSA-2025:1678?
The software affected by RHSA-2025:1678 includes multiple packages of bind9.16 and its associated utilities.
4
Is there a workaround for RHSA-2025:1678?
There are no specific workarounds provided for RHSA-2025:1678; upgrading is recommended.
5
When was RHSA-2025:1678 released?
RHSA-2025:1678 was released on a date specified in the Red Hat advisory, which can be checked for specific details.