Red Hat alert RHSA-2025:0039-01 (bind and bind-dyndb-ldap)

An update for bind and bind-dyndb-ldap is now available for Red Hat
Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: stack exhaustion in control channel code may lead to DoS
(CVE-2023-3341)

* bind9: Parsing large DNS messages may cause excessive CPU load
(CVE-2023-4408)

* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator
(CVE-2023-50387)

* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
(CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0
International License (https://creativecommons.org/licenses/by/4.0/). If you
distribute this content, or a modified version of it, you must provide
attribution to Red Hat Inc. and provide a link to the original.

Original: https://access.redhat.com/security/data/csaf/v2/advisories/2025/rhsa-2025_0039.json