gpp_maybe
Security update for bind
SUSE-SLE-SAP-12-SP2-2020-1914
This update for bind fixes the following issues: - Amended documentation referring to rule types "krb5-subdomain" and "ms-subdomain". This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. [CVE-2018-5741] - Further limit the number of queries that can be triggered from a request. Root and TLD servers are no longer exempt from max-recursion-queries. Fetches for missing name server address records are limited to 4 for any domain. [CVE-2020-8616] - Replaying a TSIG BADTIME response as a request could trigger an assertion failure. [CVE-2020-8617] [bsc#1109160, bsc#1171740, CVE-2018-5741, bind-CVE-2018-5741.patch, CVE-2020-8616, bind-CVE-2020-8616.patch, CVE-2020-8617, bind-CVE-2020-8617.patch] - Don't rely on /etc/insserv.conf anymore for proper dependencies against nss-lookup.target in named.service and lwresd.service (bsc#1118367 bsc#1118368) - Using a drop-in file
-
Release DateJul 15 2020
-
References
-
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le
-
Packagesbind
Domain Name System (DNS) Server (named)bind-chrootenv9.9.9P1-63.17.1lock rpmlock src
Chroot environment for BIND named and lwresdbind-doc9.9.9P1-63.17.1lock rpm
BIND documentationbind-libs9.9.9P1-63.17.1lock rpm
Shared libraries of BINDbind-utils9.9.9P1-63.17.1lock rpm
Utilities to query and test DNS9.9.9P1-63.17.1lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64
-
Packagesbind
Domain Name System (DNS) Server (named)bind-chrootenv9.9.9P1-63.17.1lock rpmlock src
Chroot environment for BIND named and lwresdbind-doc9.9.9P1-63.17.1lock rpm
BIND documentationbind-libs9.9.9P1-63.17.1lock rpm
Shared libraries of BINDbind-libs-32bit9.9.9P1-63.17.1lock rpm
Shared libraries of BINDbind-utils9.9.9P1-63.17.1lock rpm
Utilities to query and test DNS9.9.9P1-63.17.1lock rpm