SUSE-SU-2022:3729-1
SUSE-SU-2022:3729-1 · Security update for bind
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for bind fixes the following issues: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614). - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code for the ECDSA algorithm (bsc#1203619). - CVE-2022-38178: Fixed memory leaks that could be externally triggered in the DNSSEC verification code for the EdDSA algorithm (bsc#1203620).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
bind SUSE:Linux Enterprise High Performance Computing 15-ESPOS
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise High Performance Computing 15-LTSS
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise Server 15-LTSS
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise Server 15 SP1-BCL
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise Server 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise Server 15 SP2-BCL
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise Server 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise Server for SAP Applications 15
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise Server for SAP Applications 15 SP1
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Linux Enterprise Server for SAP Applications 15 SP2
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Manager Proxy 4.1
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Manager Retail Branch Server 4.1
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Manager Server 4.1
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Enterprise Storage 6
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind SUSE:Enterprise Storage 7
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind openSUSE:Leap 15.3
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
bind openSUSE:Leap 15.4
- Affected ranges
- ECOSYSTEM: < 9.16.6-150000.12.63.1
Update to 9.16.6-150000.12.63.1
Original sources
- https://www.suse.com/support/update/announcement/2022/suse-su-20223729-1/
- https://bugzilla.suse.com/1203614
- https://bugzilla.suse.com/1203619
- https://bugzilla.suse.com/1203620
- https://www.suse.com/security/cve/CVE-2022-2795
- https://www.suse.com/security/cve/CVE-2022-38177
- https://www.suse.com/security/cve/CVE-2022-38178
- https://osv.dev/vulnerability/SUSE-SU-2022:3729-1