Bug 33437 - bind new security issues CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-2024-4076
Summary: bind new security issues CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-20...
Status: NEW
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Nicolas Salguero
QA Contact: Sec team
URL:
Whiteboard: MGA9TOO
Keywords:
Depends on:
Blocks:
 
Reported: 2024-07-25 10:32 CEST by Nicolas Salguero
Modified: 2024-07-25 22:36 CEST (History)
0 users

See Also:
Source RPM: bind-9.18.24-1.mga10.src.rpm
CVE: CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-2024-4076
Status comment: Fixed upstream in 9.18.28 and patches available from upstream and Ubuntu

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Nicolas Salguero 2024-07-25 10:32:56 CEST 
Ubuntu has issued an advisory on July 23:
https://ubuntu.com/security/notices/USN-6909-1

Those CVEs were announced here: https://www.openwall.com/lists/oss-security/2024/07/23/1.

The problems are fixed in version 9.18.28.  See: https://downloads.isc.org/isc/bind9/9.18.28/patches/
Nicolas Salguero 2024-07-25 10:33:44 CEST

CVE: (none) => CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-2024-4076
Source RPM: (none) => bind-9.18.24-1.mga10.src.rpm
Whiteboard: (none) => MGA9TOO
Status comment: (none) => Fixed upstream in 9.18.28 and patches available from upstream and Ubuntu

Comment 1 Lewis Smith 2024-07-25 22:36:33 CEST 
Assigning to you Nicolas, you committed 9.18.24 similarly for a lot of CVEs.

Assignee: bugsquad => nicolas.salguero
Note You need to log in before you can comment on or make changes to this bug.