SUSE-SU-2026:2617-1

Details

Description of the patch:

This update for bind fixes the following issues:

CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).

Affected Packages

bind

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

9.16.50-150400.5.62.1

bind-doc

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

9.16.50-150400.5.62.1

bind-utils

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

9.16.50-150400.5.62.1

python3-bind

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

9.16.50-150400.5.62.1

References

ADVISORY

https://bugzilla.suse.com/1265591

ADVISORY

https://bugzilla.suse.com/1265592

ADVISORY

https://bugzilla.suse.com/1265594

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-June/047604.html

ADVISORY