gpp_maybe Security update for bind

slessp4-bind-13185

This update for bind fixes the following issues: - An attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relied solely on TSIG keys for protection could be manipulated into (1) providing an AXFR of a zone to an unauthorized recipient and (2) accepting bogus Notify packets. [bsc#1046554, CVE-2017-3142] - An attacker who with the ability to send and receive messages to an authoritative DNS server and who had knowledge of a valid TSIG key name for the zone and service being targeted was able to manipulate BIND into accepting an unauthorized dynamic update. [bsc#1046555, CVE-2017-3143]

• Release Date
  Jun 29 2017
• References
  Bugzilla: 1046554, 1046555
  CVEs: CVE-2017-3142, CVE-2017-3143
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.9.6P1-0.50.1 lock rpm lock src

  bind-chrootenv
  Chroot environment for BIND named and lwresd

  9.9.6P1-0.50.1 lock rpm

  bind-doc
  BIND documentation

  9.9.6P1-0.50.1 lock rpm

  bind-libs
  Shared libraries of BIND

  9.9.6P1-0.50.1 lock rpm

  bind-libs-32bit
  Shared libraries of BIND

  9.9.6P1-0.50.1 lock rpm

  bind-utils
  Utilities to query and test DNS

  9.9.6P1-0.50.1 lock rpm

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.9.6P1-0.50.1 lock rpm lock src

  bind-chrootenv
  Chroot environment for BIND named and lwresd

  9.9.6P1-0.50.1 lock rpm

  bind-doc
  BIND documentation

  9.9.6P1-0.50.1 lock rpm

  bind-libs
  Shared libraries of BIND

  9.9.6P1-0.50.1 lock rpm

  bind-libs-x86
  Shared libraries of BIND

  9.9.6P1-0.50.1 lock rpm

  bind-utils
  Utilities to query and test DNS

  9.9.6P1-0.50.1 lock rpm

SUSE Linux Enterprise Server 11.4 i586

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.9.6P1-0.50.1 lock rpm lock src

  bind-chrootenv
  Chroot environment for BIND named and lwresd

  9.9.6P1-0.50.1 lock rpm

  bind-doc
  BIND documentation

  9.9.6P1-0.50.1 lock rpm

  bind-libs
  Shared libraries of BIND

  9.9.6P1-0.50.1 lock rpm

  bind-utils
  Utilities to query and test DNS

  9.9.6P1-0.50.1 lock rpm

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.9.6P1-0.50.1 lock rpm lock src

  bind-chrootenv
  Chroot environment for BIND named and lwresd

  9.9.6P1-0.50.1 lock rpm

  bind-doc
  BIND documentation

  9.9.6P1-0.50.1 lock rpm

  bind-libs
  Shared libraries of BIND

  9.9.6P1-0.50.1 lock rpm

  bind-libs-32bit
  Shared libraries of BIND

  9.9.6P1-0.50.1 lock rpm

  bind-utils
  Utilities to query and test DNS

  9.9.6P1-0.50.1 lock rpm

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.9.6P1-0.50.1 lock rpm lock src

  bind-chrootenv
  Chroot environment for BIND named and lwresd

  9.9.6P1-0.50.1 lock rpm

  bind-doc
  BIND documentation

  9.9.6P1-0.50.1 lock rpm

  bind-libs
  Shared libraries of BIND

  9.9.6P1-0.50.1 lock rpm

  bind-libs-32bit
  Shared libraries of BIND

  9.9.6P1-0.50.1 lock rpm

  bind-utils
  Utilities to query and test DNS

  9.9.6P1-0.50.1 lock rpm