Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1366-1

Опубликовано: 15 апр. 2026
Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

  • CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7
libdns1605-9.16.6-150300.22.56.1
libirs-devel-9.16.6-150300.22.56.1
libirs1601-9.16.6-150300.22.56.1
libisc1606-9.16.6-150300.22.56.1
libisccfg1600-9.16.6-150300.22.56.1
SUSE Linux Enterprise Server 15 SP6-LTSS
libdns1605-9.16.6-150300.22.56.1
libirs-devel-9.16.6-150300.22.56.1
libirs1601-9.16.6-150300.22.56.1
libisc1606-9.16.6-150300.22.56.1
libisccfg1600-9.16.6-150300.22.56.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
libdns1605-9.16.6-150300.22.56.1
libirs-devel-9.16.6-150300.22.56.1
libirs1601-9.16.6-150300.22.56.1
libisc1606-9.16.6-150300.22.56.1
libisccfg1600-9.16.6-150300.22.56.1

Ссылки

Описание

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:libdns1605-9.16.6-150300.22.56.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libirs-devel-9.16.6-150300.22.56.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libirs1601-9.16.6-150300.22.56.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libisc1606-9.16.6-150300.22.56.1
Ссылки