SUSE-SU-2023:0341-1
SUSE-SU-2023:0341-1 · Security update for bind
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for bind fixes the following issues: - Updated to version 9.16.37 (jsc#SLE-24600): - CVE-2022-3094: Fixed an issue where a message flood could exhaust all available memory (bsc#1207471). - CVE-2022-3736: Fixed a potential crash upon receiving an RRSIG in configurations with stale cache and stale answers enabled and stale-answer-client-timeout set to a positive value (bsc#1207473). - CVE-2022-3924: Fixed a potential crash upon reaching the recursive-clients soft quota in configurations with stale answers enabled and stale-answer-client-timeout set to a positive value (bsc#1207475).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
bind SUSE:Linux Enterprise Module for Basesystem 15 SP4
- Plages de versions concernées
- ECOSYSTEM: < 9.16.37-150400.5.17.1
Mettez à jour vers 9.16.37-150400.5.17.1
bind SUSE:Linux Enterprise Module for Server Applications 15 SP4
- Plages de versions concernées
- ECOSYSTEM: < 9.16.37-150400.5.17.1
Mettez à jour vers 9.16.37-150400.5.17.1
bind openSUSE:Leap 15.4
- Plages de versions concernées
- ECOSYSTEM: < 9.16.37-150400.5.17.1
Mettez à jour vers 9.16.37-150400.5.17.1
Sources originales
- https://www.suse.com/support/update/announcement/2023/suse-su-20230341-1/
- https://bugzilla.suse.com/1207471
- https://bugzilla.suse.com/1207473
- https://bugzilla.suse.com/1207475
- https://www.suse.com/security/cve/CVE-2022-3094
- https://www.suse.com/security/cve/CVE-2022-3736
- https://www.suse.com/security/cve/CVE-2022-3924
- https://osv.dev/vulnerability/SUSE-SU-2023:0341-1