Stay Secure with the Latest Linux Advisories

security advisorysoftware updateFedora

Fedora 41: FEDORA-2025-3551f3ba1b critical: DNS flooding fixes

Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-2024-11187) New Features:. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-3551f3ba1b 2025-02-12 01:35:52.622127+00:00 -------------------------------------------------------------------------------- Name : bind-dyndb-ldap Product : Fedora 41 Version : 11.10 Release : 33.fc41 URL : https://releases.pagure.org/bind-dyndb-ldap Summary : LDAP back-end plug-in for BIND Description : This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server. -------------------------------------------------------------------------------- Update Information: Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-2024-11187) New Features: Add a new option to configure the maximum number of outgoing queries per client request. Bug Fixes: Fix nsupdate hang when processing a large update. Fix possible assertion failure when reloading server while processing update policy rules. [GL #5006] Fix dnssec-signzone signing non-DNSKEY RRsets with revoked keys. Fix improper handling of unknown directives in resolv.conf. Upstream Release Notes -------------------------------------------------------------------------------- ChangeLog: * Mon Feb 3 2025 Petr Menšík - 11.10-33 - Rebuilt for BIND 9.16.33 (rhbz#2342784) * Thu Nov 14 2024 Petr Menšík - 11.10-32 - Rebuilt for BIND 9.18.31 (rhbz#2319214) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2319214 - bind-9.18.31 is available https://bugzilla.redhat.com/show_bug.cgi?id=2319214 [ 2 ] Bug #2331675 - bind-9.18.32 is available https://bugzilla.redhat.com/show_bug.cgi?id=2331675 [ 3 ] Bug #2342784 - bind-9.18.33 is available https://bugzilla.redhat.com/show_bug.cgi?id=2342784 [ 4 ] Bug #2342883 - CVE-2024-12705 bind: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2342883 [ 5 ] Bug #2342891 - CVE-2024-11187 bind: Many records in the additional section cause CPU exhaustion [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2342891 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-3551f3ba1b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- . Fedora 41 security update: recent improvements to bind-dyndb-ldap addressing DNS flooding vulnerabilities and introducing new functionalities.. bind-dyndb-ldap, security advisory, DNS flooding fix, Fedora update, security patch. . Severity: Critical. LinuxSecurity.com Team

Feb 12, 2025 •Critical Fedora