{"id":"CLSA-2026-1787221736","summary":"bind: Fix of 2 CVEs","details":"- CVE-2023-6516: bound the memory used to queue RBTDB tree-pruning events, so\n  that recursive query patterns which continuously trigger cache-database\n  maintenance can no longer exceed max-cache-size and exhaust host memory (DoS)\n- CVE-2023-6516 follow-up: make the tree-pruning queue per-node-lock bucketed\n  and process it in quanta, so that the queue introduced above does not starve\n  cache cleanup under load and let cache memory grow without bound\n- CVE-2023-6516 follow-up: handle a node being re-queued for tree pruning\n  gracefully instead of asserting, and do not append a parent to a pruning\n  list it is already on, avoiding an assertion failure (DoS) and pruning-list\n  corruption reachable through normal cache activity\n- CVE-2023-6516 follow-up: adopt the pruning design upstream settled on in\n  9.16.49 - run tree pruning on a dedicated task with an unlimited quantum\n  instead of sharing the quantum-1 cache database task, clean every eligible\n  ancestor in a single pass, and re-create both tasks when the cache is\n  flushed so that pruning keeps working after \"rndc flush\"","modified":"2026-10-26T09:31:46.174580723Z","published":"2026-10-06T15:12:33Z","upstream":["CVE-2023-6516"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1787221736.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3341"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6516"}],"affected":[{"package":{"name":"bind","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-chroot","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-chroot?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-export-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-export-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-export-libs","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-export-libs?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-libs","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-libs?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-libs-lite","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-libs-lite?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-license","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-license?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-lite-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-lite-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-pkcs11","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-pkcs11?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-pkcs11-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-pkcs11-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-pkcs11-libs","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-pkcs11-libs?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-pkcs11-utils","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-pkcs11-utils?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-sdb","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-sdb?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-sdb-chroot","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-sdb-chroot?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}},{"package":{"name":"bind-utils","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bind-utils?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.0.7.P2.el7_9.16.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1787221736.json"}}],"schema_version":"1.9.0"}