gpp_maybe
Security update for bind
SUSE-SLE-SERVER-12-2017-1078
This update for bind fixes the following issues: - An attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relied solely on TSIG keys for protection could be manipulated into (1) providing an AXFR of a zone to an unauthorized recipient and (2) accepting bogus Notify packets. [bsc#1046554, CVE-2017-3142] - An attacker who with the ability to send and receive messages to an authoritative DNS server and who had knowledge of a valid TSIG key name for the zone and service being targeted was able to manipulate BIND into accepting an unauthorized dynamic update. [bsc#1046555, CVE-2017-3143]
-
Release DateJun 29 2017
-
References
-
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server LTSS 12 s390x
-
Packagesbind
Domain Name System (DNS) Server (named)bind-chrootenv9.9.9P1-28.37.1 lock rpm lock src
Chroot environment for BIND named and lwresdbind-devel9.9.9P1-28.37.1 lock rpm
Development Libraries and Header Files of BINDbind-doc9.9.9P1-28.37.1 lock rpm
BIND documentationbind-libs9.9.9P1-28.37.1 lock rpm
Shared libraries of BINDbind-libs-32bit9.9.9P1-28.37.1 lock rpm
Shared libraries of BINDbind-utils9.9.9P1-28.37.1 lock rpm
Utilities to query and test DNS9.9.9P1-28.37.1 lock rpm
SUSE Linux Enterprise Server LTSS 12 x86_64
-
Packagesbind
Domain Name System (DNS) Server (named)bind-chrootenv9.9.9P1-28.37.1 lock rpm lock src
Chroot environment for BIND named and lwresdbind-devel9.9.9P1-28.37.1 lock rpm
Development Libraries and Header Files of BINDbind-doc9.9.9P1-28.37.1 lock rpm
BIND documentationbind-libs9.9.9P1-28.37.1 lock rpm
Shared libraries of BINDbind-libs-32bit9.9.9P1-28.37.1 lock rpm
Shared libraries of BINDbind-utils9.9.9P1-28.37.1 lock rpm
Utilities to query and test DNS9.9.9P1-28.37.1 lock rpm