shield
Recommended update for bind
SUSE-SLE-SAP-12-SP4-2020-2915
This update for bind fixes the following issues: Bind was updated to version 9.11.22 Note: - bind is now more strict in regards to DNSSEC. If queries are not working, check for DNSSEC issues. For instance, if bind is used in a namserver forwarder chain, the forwarding DNS servers must support DNSSEC. This upgrade also fixes the following security issues: * 5481. [security] "update-policy" rules of type "subdomain" were incorrectly treated as "zonesub" rules, which allowed keys used in "subdomain" rules to update names outside of the specified subdomains. The problem was fixed by making sure "subdomain" rules are again processed as described in the ARM. (CVE-2020-8624 bsc#1175443) * 5480. [security] When BIND 9 was compiled with native PKCS#11 support, it was possible to trigger an assertion failure in code determining the number of bits in the PKCS#11 RSA public key with a specially crafted packet. (CVE-2020-8623 bsc#1175443) * 5476. [security] It was possible to trigger an assertion failure when verifying the response to a TSIG-signed request. (CVE-2020-8622 bsc#1175443) - Suppress warning message about missing file. (bsc#1092283, bsc#1127583, bsc#1094236, bsc#1173983) Added */etc/bind.keys* to *NAMED_CONF_INCLUDE_FILES* in */etc/sysconfig/named*.
-
Release DateOct 13 2020
-
ReferencesBugzilla: 1094236, 1127583, 1092283, 1173983, 1175443
CVEs: CVE-2020-8624, CVE-2020-8623, CVE-2020-8622 -
Typerecommended
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le
-
Packagesbind
Domain Name System (DNS) Server (named)bind-chrootenv9.11.22-3.22.1lock rpmlock src
Chroot environment for BIND named and lwresdbind-doc9.11.22-3.22.1lock rpm
BIND documentationbind-utils9.11.22-3.22.1lock rpm
Utilities to query and test DNSlibbind9-1619.11.22-3.22.1lock rpm
BIND9 shared library used by BINDlibdns11109.11.22-3.22.1lock rpm
DNS library used by BINDlibirs1619.11.22-3.22.1lock rpm
The BIND Information Retrieval System librarylibisc11079.11.22-3.22.1lock rpm
ISC shared library used by BINDlibisccc1619.11.22-3.22.1lock rpm
Command Channel Library used by BINDlibisccfg1639.11.22-3.22.1lock rpm
Exported ISC configuration shared libraryliblwres1619.11.22-3.22.1lock rpm
Lightweight Resolver API librarypython-bind9.11.22-3.22.1lock rpm
A module allowing rndc commands to be sent from Python programs9.11.22-3.22.1lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64
-
Packagesbind
Domain Name System (DNS) Server (named)bind-chrootenv9.11.22-3.22.1lock rpmlock src
Chroot environment for BIND named and lwresdbind-doc9.11.22-3.22.1lock rpm
BIND documentationbind-utils9.11.22-3.22.1lock rpm
Utilities to query and test DNSlibbind9-1619.11.22-3.22.1lock rpm
BIND9 shared library used by BINDlibdns11109.11.22-3.22.1lock rpm
DNS library used by BINDlibirs1619.11.22-3.22.1lock rpm
The BIND Information Retrieval System librarylibisc11079.11.22-3.22.1lock rpm
ISC shared library used by BINDlibisc1107-32bit9.11.22-3.22.1lock rpm
ISC shared library used by BINDlibisccc1619.11.22-3.22.1lock rpm
Command Channel Library used by BINDlibisccfg1639.11.22-3.22.1lock rpm
Exported ISC configuration shared libraryliblwres1619.11.22-3.22.1lock rpm
Lightweight Resolver API librarypython-bind9.11.22-3.22.1lock rpm
A module allowing rndc commands to be sent from Python programs9.11.22-3.22.1lock rpm