SUSE-SU-2015:0011-2

UNKNOWN

Security update for bind

Published Jan 27, 2014

Modified 12 years ago

Fix available

Details

Description of the patch:

This update fixes a DoS vulnerability in bind when handling malformed NSEC3-signed zones. CVE-2014-0591 has been assigned to this issue.

Security Issue references:

* CVE-2014-0591
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591>

Affected Packages

bind

SUSE Linux Enterprise Server 11 SP2SUSE Linux Enterprise Server 11 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP2

Fixed in:

9.9.4P2-0.6.1

bind-chrootenv

SUSE Linux Enterprise Server 11 SP2SUSE Linux Enterprise Server 11 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP2

Fixed in:

9.9.4P2-0.6.1

bind-devel

SUSE Linux Enterprise Server 11 SP2SUSE Linux Enterprise Server 11 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP2

Fixed in:

9.9.6P1-0.5.5

bind-doc

SUSE Linux Enterprise Server 11 SP2SUSE Linux Enterprise Server 11 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP2

Fixed in:

9.9.4P2-0.6.1

bind-libs

SUSE Linux Enterprise Server 11 SP2SUSE Linux Enterprise Server 11 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP2

Fixed in:

9.9.4P2-0.6.1

bind-libs-32bit

SUSE Linux Enterprise Server 11 SP2SUSE Linux Enterprise Server 11 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP2

Fixed in:

9.9.4P2-0.6.1

bind-libs-x86

SUSE Linux Enterprise Server 11 SP2SUSE Linux Enterprise Server 11 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP2

Fixed in:

9.9.4P2-0.6.1

bind-utils

SUSE Linux Enterprise Server 11 SP2SUSE Linux Enterprise Server 11 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP2

Fixed in:

9.9.4P2-0.6.1

References

https://bugzilla.suse.com/743758

https://bugzilla.suse.com/765315

https://bugzilla.suse.com/772945

https://bugzilla.suse.com/780157

https://bugzilla.suse.com/784602

https://bugzilla.suse.com/796112

https://bugzilla.suse.com/815230

https://bugzilla.suse.com/819475

https://bugzilla.suse.com/831899

https://bugzilla.suse.com/858639

https://bugzilla.suse.com/882511

https://bugzilla.suse.com/908994

https://lists.suse.com/pipermail/sle-security-updates/2015-February/001228.html

https://www.suse.com/security/cve/CVE-2012-1667/

https://www.suse.com/security/cve/CVE-2012-3817/

https://www.suse.com/security/cve/CVE-2012-4244/

https://www.suse.com/security/cve/CVE-2012-5166/

https://www.suse.com/security/cve/CVE-2013-4854/

https://www.suse.com/security/cve/CVE-2014-0591/

https://www.suse.com/security/cve/CVE-2014-8500/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2015/suse-su-20150011-2/

Upstream

CVE-2012-1667 CVE-2012-3817 CVE-2012-4244 CVE-2012-5166 CVE-2013-4854 CVE-2014-0591 CVE-2014-8500

Ecosystems

SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 11 SP2

Timeline

PublishedJan 27, 2014

ModifiedJan 27, 2014

SUSE-SU-2015:0011-2 | Mondoo Vulnerability Intelligence