p PatchFirst

SUSE-SU-2026:2617-1

SUSE-SU-2026:2617-1 · Security update for bind

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for bind fixes the following issues: - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 9.16.50-150400.5.62.1

    Update to 9.16.50-150400.5.62.1

  • bind SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 9.16.50-150400.5.62.1

    Update to 9.16.50-150400.5.62.1

  • bind SUSE:Linux Enterprise Server 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 9.16.50-150400.5.62.1

    Update to 9.16.50-150400.5.62.1

  • bind SUSE:Linux Enterprise Server for SAP Applications 15 SP4

    Affected ranges
    • ECOSYSTEM: < 9.16.50-150400.5.62.1

    Update to 9.16.50-150400.5.62.1

Original sources

Check your server →