[CLSA-2026:1788000191] Fix CVE(s): CVE-2023-6516
Type:
security
Severity:
Important
Release date:
2026-08-29 10:48:19 UTC
Description:
* SECURITY UPDATE: unbounded growth of the asynchronous RBT cache-cleanup queue lets max-cache-size be exceeded - debian/patches/CVE-2023-6516.patch: limit isc_task_send() overhead for tree pruning (upstream c3377cbfaa). - debian/patches/CVE-2023-6516-lock-contention.patch: reduce lock contention during RBTDB tree pruning (upstream 801e888d03). - debian/patches/CVE-2023-6516-prune-guards.patch: guard re-queueing a node for pruning (upstream f6289ad931, 4b6fc97af6, 7d9be24bb1). - debian/patches/CVE-2023-6516-final-design.patch: the design upstream settled on in 9.16.49, GL #4621 (upstream a548312191, eba7fb5f9f, 5f98eba608). Drops the prunenodes lists, so dns_rbtnode is unchanged and MAPAPI stays at 1.0. - CVE-2023-6516
CVEs fixed:
Updated packages:
  • bind9_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:07f83a59c8ff0d763af5691e63182a80e8e6dc16
  • bind9-doc_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_all.deb
    sha:06ed7c32c6b9c6b41e6891bc144bb5256c793a2c
  • bind9-host_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:913d558e57564eda1724cd34ee3f777da3701b8f
  • bind9utils_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:7f1af8127edd6520e90969c0f0e4aef23572027d
  • dnsutils_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:e53ca34c69130feb402a86ddc3edbb8990b9b035
  • libbind-dev_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:330c51655d2af7139078c2d24a64b9cafae50b30
  • libbind-export-dev_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:a7bcbd40841fc36bbb7e1da47d148b1ee454e1c3
  • libbind9-160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:5047279a65a99987d2f5f498af4bf937e26d82c4
  • libdns-export1100_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:6be8ed33dcda9bdcc873ca733c719ce9360637b6
  • libdns1100_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:a4abb8fd6ea5bb7fc8f7814f163055260719d49b
  • libirs-export160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:db09fb63d6235dab70a0d97e634ea45c2af73739
  • libirs160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:f8b8871b96673acb2091ef4bfaf932cfea12b2b7
  • libisc-export169_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:473a6a1a3fa196c7e6e977b17ef61e9b709698d8
  • libisc169_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:6152969cb2ed91799e2a436b3f22b1bb2425f766
  • libisccc-export160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:6deed3086716dfad9655313b035aa7456e766272
  • libisccc160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:36bf4a43722715a7d2a4d0abd3dd2d4d007d6278
  • libisccfg-export160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:719685b0c0c29d88b3ccac68efa07a50edae3187
  • libisccfg160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:f5a30ad548a5b9137cc8663c02306f7d5b9ce729
  • liblwres160_9.11.3+dfsg-1ubuntu1.18+tuxcare.els11_amd64.deb
    sha:d997dba0f2ab3650ea64b06f4bcb6a16fd3beebd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.