Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2289-1

Опубликовано: 05 июн. 2026
Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).

Список пакетов

Image SLES12-SP5-Azure-SAP-BYOS
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
Image SLES12-SP5-Azure-SAP-On-Demand
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
Image SLES12-SP5-EC2-BYOS
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
Image SLES12-SP5-EC2-ECS-On-Demand
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
Image SLES12-SP5-EC2-On-Demand
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
Image SLES12-SP5-EC2-SAP-BYOS
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
Image SLES12-SP5-GCE-BYOS
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
Image SLES12-SP5-GCE-On-Demand
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
Image SLES12-SP5-GCE-SAP-BYOS
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
Image SLES12-SP5-GCE-SAP-On-Demand
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
SUSE Linux Enterprise Server 12 SP5-LTSS
bind-9.11.22-3.71.1
bind-chrootenv-9.11.22-3.71.1
bind-devel-9.11.22-3.71.1
bind-doc-9.11.22-3.71.1
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisc1107-32bit-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
bind-9.11.22-3.71.1
bind-chrootenv-9.11.22-3.71.1
bind-devel-9.11.22-3.71.1
bind-doc-9.11.22-3.71.1
bind-utils-9.11.22-3.71.1
libbind9-161-9.11.22-3.71.1
libdns1110-9.11.22-3.71.1
libirs161-9.11.22-3.71.1
libisc1107-9.11.22-3.71.1
libisc1107-32bit-9.11.22-3.71.1
libisccc161-9.11.22-3.71.1
libisccfg163-9.11.22-3.71.1
liblwres161-9.11.22-3.71.1
python-bind-9.11.22-3.71.1

Ссылки

Описание

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:bind-utils-9.11.22-3.71.1
Image SLES12-SP5-Azure-SAP-BYOS:libbind9-161-9.11.22-3.71.1
Image SLES12-SP5-Azure-SAP-BYOS:libdns1110-9.11.22-3.71.1
Image SLES12-SP5-Azure-SAP-BYOS:libirs161-9.11.22-3.71.1
Ссылки

Описание

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:bind-utils-9.11.22-3.71.1
Image SLES12-SP5-Azure-SAP-BYOS:libbind9-161-9.11.22-3.71.1
Image SLES12-SP5-Azure-SAP-BYOS:libdns1110-9.11.22-3.71.1
Image SLES12-SP5-Azure-SAP-BYOS:libirs161-9.11.22-3.71.1
Ссылки

Описание

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) - for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in the question section. Specially crafted requests reaching the affected code paths - recursion, dynamic updates (`UPDATE`), zone change notifications (`NOTIFY`), or processing of `IN`-specific record types in non-`IN` data - can cause assertion failures in `named`. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:bind-utils-9.11.22-3.71.1
Image SLES12-SP5-Azure-SAP-BYOS:libbind9-161-9.11.22-3.71.1
Image SLES12-SP5-Azure-SAP-BYOS:libdns1110-9.11.22-3.71.1
Image SLES12-SP5-Azure-SAP-BYOS:libirs161-9.11.22-3.71.1
Ссылки