{"id":"CLSA-2025-1762537520","summary":"Fix CVE(s): CVE-2023-4408","details":"   * SECURITY UPDATE: The DNS message parsing code in `named` includes a section\n     whose computational complexity is overly high\n     - debian/patches/CVE-2023-4408.patch: refactoring parsing code\n     - debian/patches/CVE-2023-4408-1.patch: fix DNSSEC test suite\n     - debian/libdns1100.symbols: some function declarations were removed\n       according to the CVE-2023-4408.patch\n     - CVE-2023-4408\n   * Add patch for enabling automated testing","modified":"2026-06-04T09:45:27.086878895Z","published":"2025-11-07T17:45:24Z","upstream":["CVE-2023-4408"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1762537520.html"}],"affected":[{"package":{"name":"bind9","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bind9?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"bind9-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bind9-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"bind9-host","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bind9-host?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"bind9utils","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bind9utils?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"dnsutils","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/dnsutils?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libbind-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libbind-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libbind-export-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libbind-export-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libbind9-161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libbind9-161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libdns-export1104","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libdns-export1104?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libdns1104","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libdns1104?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libirs-export161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libirs-export161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libirs161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libirs161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libisc-export1100","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisc-export1100?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libisc1100","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisc1100?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libisccc-export161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisccc-export161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libisccc161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisccc161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libisccfg-export163","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisccfg-export163?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"libisccfg163","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisccfg163?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}},{"package":{"name":"liblwres161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/liblwres161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1762537520.json"}}],"schema_version":"1.7.5"}