[CLSA-2026:1787401059] Fix CVE(s): CVE-2023-6516
Type:
security
Severity:
Important
Release date:
2026-08-22 12:22:33 UTC
Description:
* SECURITY UPDATE: named running as a recursive resolver could be driven to exceed the configured max-cache-size, and exhaust available memory, because tree-pruning cleanup events were queued faster than they were processed - debian/patches/CVE-2023-6516.patch: limit isc_task_send() overhead for tree pruning (upstream c3377cbfaa) - debian/patches/CVE-2023-6516-lock-contention.patch: reduce lock contention during RBTDB tree pruning (upstream 801e888d03) - debian/patches/CVE-2023-6516-prune-guards.patch: guard re-queueing a node for pruning (upstream f6289ad931, 4b6fc97af6, 7d9be24bb1) - debian/patches/CVE-2023-6516-final-design.patch: the pruning design upstream settled on in 9.16.49, GL #4621 (upstream a548312191, eba7fb5f9f, 5f98eba608); adds dns_db_setprunetask() rather than changing the dns_db_settask() ABI - debian/libdns1104.symbols: record the three entry points the last patch adds - CVE-2023-6516
CVEs fixed:
Updated packages:
  • bind9_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:356ac99ebab2069f9b0dbf01385799f499610b94
  • bind9-doc_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_all.deb
    sha:ac9cb6e808b620fc29cc34dd4a15634ad922e5be
  • bind9-host_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:d4cbf6f3df7d0975ab3e4955375a5a3bfac6b9d1
  • bind9utils_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:050a4fe04ca707c3d8a6c2591303f5b95a69ae89
  • dnsutils_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:2b15b053ae4698bfa586301959e40e9a9f8249a8
  • libbind-dev_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:391653c551840b2c64ebf207b4d9c298c50580d2
  • libbind-export-dev_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:952c77364691e4313d268f9b37214d8df911a9c1
  • libbind9-161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:d72d3c3e3fa2cf2ad4a2ea6a3c09c1fe425859b7
  • libdns-export1104_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:7409639960454b71bb02f5b4e0983af6ef158830
  • libdns1104_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:71b73cb2ad7e7d98a678734c45f254f54e6f0efa
  • libirs-export161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:974fa8e11160e8bc59941681f17326078dbe576f
  • libirs161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:23bc7501160ce968c6baf13207a9421da43a61b0
  • libisc-export1100_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:dd0d7ea739e94570aca6d42d63cf8c0d9be11234
  • libisc1100_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:90bb3d3f8aecae95b0dd987069bcfe721f3eaaf3
  • libisccc-export161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:aac7b2f52d611eaf406388bf7f4d719ce8b56ee7
  • libisccc161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:86a3e187e374ca71d5c9bd3c1ab1efe528c271da
  • libisccfg-export163_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:f7eddd315d234bd2f6ddaef33226e3c63d27cdc9
  • libisccfg163_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:0b121186e75c1a6bc4b068bacc2aa0d72a091bb5
  • liblwres161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els5_amd64.deb
    sha:b132fb3619d197779e7c0276ace8d01c41cfdef5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.