p PatchFirst

SUSE-SU-2026:2676-1

SUSE-SU-2026:2676-1 · Security update for bind

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for bind fixes the following issues - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594). - CVE-2026-5950: Unbounded resend loop in BIND 9 resolver (bsc#1265596). - CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (bsc#1265593). Changes for bind: - Update to release 9.18.49

Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind SUSE:Linux Enterprise Server 15 SP6-LTSS

    Affected ranges
    • ECOSYSTEM: < 9.18.49-150600.3.26.1

    Update to 9.18.49-150600.3.26.1

  • bind SUSE:Linux Enterprise Server for SAP Applications 15 SP6

    Affected ranges
    • ECOSYSTEM: < 9.18.49-150600.3.26.1

    Update to 9.18.49-150600.3.26.1

Original sources

Check your server →