SUSE-SU-2026:2616-1

Details

Description of the patch:

This update for bind fixes the following issues:

CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).

Affected Packages

bind

SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP5SUSE Linux Enterprise Server 15 SP5-LTSS

Fixed in:

9.16.50-150500.8.38.1

bind-doc

SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP5SUSE Linux Enterprise Server 15 SP5-LTSS

Fixed in:

9.16.50-150500.8.38.1

bind-utils

SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Server 15 SP5

Fixed in:

9.16.50-150500.8.38.1

python3-bind

SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Server 15 SP5

Fixed in:

9.16.50-150500.8.38.1

References

ADVISORY

https://bugzilla.suse.com/1265591

ADVISORY

https://bugzilla.suse.com/1265592

ADVISORY

https://bugzilla.suse.com/1265594

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-June/047605.html

ADVISORY