Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2779-1

Опубликовано: 06 июл. 2026
Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

  • CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
  • CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
  • CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7
libdns1605-9.16.6-150300.22.59.1
libirs-devel-9.16.6-150300.22.59.1
libirs1601-9.16.6-150300.22.59.1
libisc1606-9.16.6-150300.22.59.1
libisccfg1600-9.16.6-150300.22.59.1
SUSE Linux Enterprise Server 15 SP6-LTSS
libdns1605-9.16.6-150300.22.59.1
libirs-devel-9.16.6-150300.22.59.1
libirs1601-9.16.6-150300.22.59.1
libisc1606-9.16.6-150300.22.59.1
libisccfg1600-9.16.6-150300.22.59.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
libdns1605-9.16.6-150300.22.59.1
libirs-devel-9.16.6-150300.22.59.1
libirs1601-9.16.6-150300.22.59.1
libisc1606-9.16.6-150300.22.59.1
libisccfg1600-9.16.6-150300.22.59.1

Ссылки

Описание

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:libdns1605-9.16.6-150300.22.59.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libirs-devel-9.16.6-150300.22.59.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libirs1601-9.16.6-150300.22.59.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libisc1606-9.16.6-150300.22.59.1
Ссылки

Описание

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:libdns1605-9.16.6-150300.22.59.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libirs-devel-9.16.6-150300.22.59.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libirs1601-9.16.6-150300.22.59.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libisc1606-9.16.6-150300.22.59.1
Ссылки

Описание

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) - for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in the question section. Specially crafted requests reaching the affected code paths - recursion, dynamic updates (`UPDATE`), zone change notifications (`NOTIFY`), or processing of `IN`-specific record types in non-`IN` data - can cause assertion failures in `named`. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:libdns1605-9.16.6-150300.22.59.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libirs-devel-9.16.6-150300.22.59.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libirs1601-9.16.6-150300.22.59.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libisc1606-9.16.6-150300.22.59.1
Ссылки