[CLSA-2026:1789036496] Fix CVE(s): CVE-2023-6516
Type:
security
Severity:
Important
Release date:
2026-09-10 10:35:08 UTC
Description:
* SECURITY UPDATE: unbounded cache-cleanup event queue lets a query pattern drive named past max-cache-size - debian/patches/CVE-2023-6516.patch: send tree-pruning events to a dedicated rbtdb pruning task whose quantum is effectively unlimited instead of the quantum-1 rbtdb->task, so the pruning queue drains at least as fast as it is fed; traverse every eligible ancestor in one prune_tree() execution; create the cache database tasks in cache_create_db() so a cache flush keeps pruning alive - takes upstream's final 9.16.49 design (GL #4596, GL #4621) and not the superseded prunenodes-list design, so struct dns_rbtnode is unchanged and MAPAPI stays at 1.1 - only decrement_reference() queues prune events on 9.10.3; cleanup_dead_nodes() drains synchronously and is left untouched - dns_db_settask() takes a second task argument; no reverse dependency in this ELS set consumes that symbol - CVE-2023-6516
CVEs fixed:
Updated packages:
  • bind9_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:1b713ed9ffa93c9daf2400248d0ccd17a0651042
  • bind9-doc_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_all.deb
    sha:07182c6d68bd8cbaf0c951389e7b4579318e80f6
  • bind9-host_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:56615a286f6cfa3cf0f899317848c5afde8782ae
  • bind9utils_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:c94db43dde8eb129ff5ffe8cd53f88b588ab9f40
  • dnsutils_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:58bcef0ef138495daff4ac0afd64ccef9887250c
  • host_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_all.deb
    sha:f4bacc97cd059709fa3271f58ccafca5cb398bf4
  • libbind-dev_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:aa0fe5a0935603975548fd1377cc03bf1b9a203f
  • libbind-export-dev_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:390699a5633f7e52692a1017e6bd3a71f94b8568
  • libbind9-140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:9a230e738f88154cc0f900b780cd89d35925aa8f
  • libdns-export162_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:043fff3147530da30a5712ea436f0dbe95ab0fe9
  • libdns162_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:1894de60f4fe1aac435bfb331e12a9398cc12681
  • libirs-export141_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:e1ea78a6d2744bdc7e864a2d1da23cfed3b27a75
  • libirs141_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:1c3dc06e8a652ba3a56361e3d1ff405eaaccc02a
  • libisc-export160_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:e53f9b771c1ea3aa689c32f1fe8edcf05302b420
  • libisc160_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:81a697e11e44b947d9aeb4b5504667a479916233
  • libisccc-export140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:d86d5c5ae74c7da9ad745c420f6f55aa8af3a125
  • libisccc140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:c8a1129d1a3292a1ab19591a2f3999fe2993dc94
  • libisccfg-export140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:f34ee62788f6a7cf4a155239f57fa49245e7df04
  • libisccfg140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:918c4fb1c701c36f1d03c5ac9d52063af5e6bc62
  • liblwres141_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:292429f9809b3c156eeff255ff6fb97999617d55
  • lwresd_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els12_amd64.deb
    sha:a8832d90182cddff304481da4b7ba00623cdce4f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.