[CLSA-2024:1709562964] Fix CVE(s): CVE-2023-50387, CVE-2023-50868
Type:
security
Severity:
Important
Release date:
2024-03-04 14:36:08 UTC
Description:
* SECURITY UPDATE: KeyTrap denial of service vulnerability - debian/patches/CVE-2023-50387-20230-50868.patch: Fix DNSSEC verification complexity issue by updating verification function signatures. - debian/patches/CVE-2023-50387-fix-1.patch: Allow the original CVE-2023-50387 patch to work if multiple threads support is disabled. - debian/patches/CVE-2023-50387-fix-2.patch: Fix a leak. - CVE-2023-50387 - CVE-2023-50868 * a test suite was activated.
Updated packages:
  • bind9_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:bb07e566ce161d2fada27ca28c883576f61547a0
  • bind9-doc_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_all.deb
    sha:fd34c4962022db6df34f3f49bbf7848435d248cf
  • bind9-host_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:2183c3772d2f0a546d70811bf9fa8453c5e01919
  • bind9utils_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:978569f1bd270a5d85a62641619f30a54f4db745
  • dnsutils_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:16cd6a1b060a545635f0625773c072953e3ea0ba
  • libbind-dev_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:95ed70d1a96239b68bd3c94d131bca4678ada90c
  • libbind-export-dev_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:98709dc29832df014aa8967562204c8cc713a97c
  • libbind9-160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:21a69bd1b3c1687f46c916e232cca3fb152ac874
  • libdns-export1100_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:9dbcf8e203cbde4a86305541b807593f6933865b
  • libdns1100_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:0d98ebca6be15a762bb2104ce74171dfec4b831b
  • libirs-export160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:e9e327ff58b9b912014e79123163e149af912264
  • libirs160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:a2e86ac42b347f83ad54f8181dcfe5bd669feb14
  • libisc-export169_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:a17174e36b2ad95ae9741556c29d46a68b779ea7
  • libisc169_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:f36658be34dcb942fc6e67190ac898bf04065c99
  • libisccc-export160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:b73d7cc071f2e0479ab07bc18720de89602f1e6b
  • libisccc160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:ba3879ef858f672512f99f1d8c646ac45692fca3
  • libisccfg-export160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:9c390a5ea55f7435c94a07089f75db6e2c9f1b86
  • libisccfg160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:8281f2f80108f701121beb1b9f34d045c594ffa3
  • liblwres160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els3_amd64.deb
    sha:8c5621f41a317dd4892d78b36ce0986cd2b1eb0f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.