p PatchFirst

SUSE-SU-2024:1982-1

SUSE-SU-2024:1982-1 · Security update for bind

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for bind fixes the following issues: - CVE-2023-4408: Fixed denial of service during DNS message parsing with different names (bsc#1219851) - CVE-2023-50387: Fixed denial of service during DNS messages validation with DNSSEC signatures (bsc#1219823) - CVE-2023-50868: Fixed denial of service during NSEC3 closest encloser proof preparation (bsc#1219826) - CVE-2023-5517: Fixed denial of service caused by specific queries with nxdomain-redirect enabled (bsc#1219852) - CVE-2023-6516: Fixed denial of service caused by specific queries that continuously triggered cache database maintenance (bsc#1219854)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind SUSE:Linux Enterprise Module for Basesystem 15 SP6

    Affected ranges
    • ECOSYSTEM: < 9.16.6-150300.22.44.1

    Update to 9.16.6-150300.22.44.1

  • bind SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 9.16.6-150300.22.44.1

    Update to 9.16.6-150300.22.44.1

  • bind SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 9.16.6-150300.22.44.1

    Update to 9.16.6-150300.22.44.1

  • bind SUSE:Linux Enterprise Server for SAP Applications 15 SP3

    Affected ranges
    • ECOSYSTEM: < 9.16.6-150300.22.44.1

    Update to 9.16.6-150300.22.44.1

  • bind SUSE:Enterprise Storage 7.1

    Affected ranges
    • ECOSYSTEM: < 9.16.6-150300.22.44.1

    Update to 9.16.6-150300.22.44.1

Original sources

Check your server →