Описание
Security update for nsd
This update for nsd fixes the following issues:
Changes in nsd:
-
Update nsd.keyring
-
update to 4.14.3: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_3_REL/doc/ChangeLog
- CVE-2026-12490: Bypass of client certificate verification with transfer over TLS (bsc#1269563)
- CVE-2026-12246: Out of bounds stack write with crafted APL RR (bsc#1269564)
- CVE-2026-12245: Denial of DNS over TLS service by any DoT client (bsc#1269565)
- CVE-2026-12244: Heap overflow and crash with crafted SVCB RR (bsc#1269566)
-
update to 4.14.2: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_2_REL/doc/ChangeLog
-
update to 4.14.1: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_1_REL/doc/ChangeLog
-
update to 4.14.0: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_0_REL/doc/ChangeLog
-
update to 4.13.0: https://github.com/NLnetLabs/nsd/blob/NSD_4_13_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_12_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_12_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_11_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_11_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_10_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_10_0_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_9_1_REL/doc/ChangeLog https://github.com/NLnetLabs/nsd/blob/NSD_4_9_0_REL/doc/ChangeLog
-
enable systemd notify support.
-
enable dnstap support.
-
enable tcp fast open support
-
enable support for >= 2038
Список пакетов
openSUSE Leap 16.0
Ссылки
- SUSE Security Ratings
- SUSE Bug 1269563
- SUSE Bug 1269564
- SUSE Bug 1269565
- SUSE Bug 1269566
- SUSE CVE CVE-2026-12244 page
- SUSE CVE CVE-2026-12245 page
- SUSE CVE CVE-2026-12246 page
- SUSE CVE CVE-2026-12490 page
Описание
If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS message with a special crafted SVCB RR with an rdata size of 65512, that let's an (uint16_t) variable that is used to allocate space needed for the RR wrap (because total size > 65535), causing a heap overflow. The attacker can perform a controlled (RCE class) head write of up to 65509 bytes
Затронутые продукты
Ссылки
- CVE-2026-12244
- SUSE Bug 1269566
Описание
NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response.
Затронутые продукты
Ссылки
- CVE-2026-12245
- SUSE Bug 1269565
Описание
NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.
Затронутые продукты
Ссылки
- CVE-2026-12246
- SUSE Bug 1269564
Описание
When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the other conditions of the provide-xfr rule match.
Затронутые продукты
Ссылки
- CVE-2026-12490
- SUSE Bug 1269563