gpp_maybe
Security update for bind
SUSE-SLE-SAP-12-2017-52
This update for bind fixes the following issues: - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. [CVE-2016-9131, bsc#1018700, bsc#1018699] - Fix a potential assertion failure that could have been triggered by responding to a query with inconsistent DNSSEC information, thereby facilitating a denial-of-service attack. [CVE-2016-9147, bsc#1018701, bsc#1018699] - Fix potential assertion failure that could have been triggered by DNS responses that contain unusually-formed DS resource records, facilitating a denial-of-service attack. [CVE-2016-9444, bsc#1018702, bsc#1018699] - Fixed ldapdump to use a temporary pseudo nameserver that conforms to BIND's expected syntax. Prior versions would not work correctly with an LDAP backed DNS server. [bsc#965748]
-
Release DateJan 11 2017
-
ReferencesBugzilla: 1018700, 1018701, 1018702, 965748, 1018699
CVEs: CVE-2016-9147, CVE-2016-9444, CVE-2016-9131 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12 x86_64
-
Packagesbind
Domain Name System (DNS) Server (named)bind-chrootenv9.9.9P1-28.26.1 lock rpm lock src
Chroot environment for BIND named and lwresdbind-doc9.9.9P1-28.26.1 lock rpm
BIND documentationbind-libs9.9.9P1-28.26.1 lock rpm
Shared libraries of BINDbind-libs-32bit9.9.9P1-28.26.1 lock rpm
Shared libraries of BINDbind-utils9.9.9P1-28.26.1 lock rpm
Utilities to query and test DNS9.9.9P1-28.26.1 lock rpm