Security update for bind SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:0480-1 Final 1 1 2014-01-27T18:54:09Z current 2014-01-27T18:54:09Z 2014-01-27T18:54:09Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update fixes a DoS vulnerability in bind when handling malformed NSEC3-signed zones. CVE-2014-0591 has been assigned to this issue. Security Issue references: * CVE-2014-0591 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591> The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slessp1-bind Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/ Link for SUSE-SU-2015:0480-1 https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00009.html E-Mail link for SUSE-SU-2015:0480-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/684163 SUSE Bug 684163 https://bugzilla.suse.com/696585 SUSE Bug 696585 https://bugzilla.suse.com/703907 SUSE Bug 703907 https://bugzilla.suse.com/715180 SUSE Bug 715180 https://bugzilla.suse.com/718441 SUSE Bug 718441 https://bugzilla.suse.com/727495 SUSE Bug 727495 https://bugzilla.suse.com/730995 SUSE Bug 730995 https://bugzilla.suse.com/743758 SUSE Bug 743758 https://bugzilla.suse.com/765315 SUSE Bug 765315 https://bugzilla.suse.com/772945 SUSE Bug 772945 https://bugzilla.suse.com/780157 SUSE Bug 780157 https://bugzilla.suse.com/784602 SUSE Bug 784602 https://bugzilla.suse.com/796112 SUSE Bug 796112 https://bugzilla.suse.com/858639 SUSE Bug 858639 https://bugzilla.suse.com/908994 SUSE Bug 908994 https://www.suse.com/security/cve/CVE-2011-1910/ SUSE CVE CVE-2011-1910 page https://www.suse.com/security/cve/CVE-2011-2464/ SUSE CVE CVE-2011-2464 page https://www.suse.com/security/cve/CVE-2011-4313/ SUSE CVE CVE-2011-4313 page https://www.suse.com/security/cve/CVE-2012-1667/ SUSE CVE CVE-2012-1667 page https://www.suse.com/security/cve/CVE-2012-3817/ SUSE CVE CVE-2012-3817 page https://www.suse.com/security/cve/CVE-2012-4244/ SUSE CVE CVE-2012-4244 page https://www.suse.com/security/cve/CVE-2012-5166/ SUSE CVE CVE-2012-5166 page https://www.suse.com/security/cve/CVE-2014-0591/ SUSE CVE CVE-2014-0591 page https://www.suse.com/security/cve/CVE-2014-8500/ SUSE CVE CVE-2014-8500 page SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP1-TERADATA bind-9.6ESVR10P2-0.6.1 bind-chrootenv-9.6ESVR10P2-0.6.1 bind-doc-9.6ESVR10P2-0.6.1 bind-libs-9.6ESVR10P2-0.6.1 bind-libs-32bit-9.6ESVR10P2-0.6.1 bind-utils-9.6ESVR10P2-0.6.1 bind-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS bind-chrootenv-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS bind-doc-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS bind-libs-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS bind-libs-32bit-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS bind-utils-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS bind-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA bind-chrootenv-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA bind-doc-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA bind-libs-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA bind-libs-32bit-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA bind-utils-9.6ESVR10P2-0.6.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service (assertion failure and daemon exit) via a negative response containing large RRSIG RRsets. CVE-2011-1910 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-utils-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-utils-9.6ESVR10P2-0.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/ https://www.suse.com/security/cve/CVE-2011-1910.html CVE-2011-1910 https://bugzilla.suse.com/696585 SUSE Bug 696585 https://bugzilla.suse.com/698286 SUSE Bug 698286 Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request. CVE-2011-2464 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-utils-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-utils-9.6ESVR10P2-0.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/ https://www.suse.com/security/cve/CVE-2011-2464.html CVE-2011-2464 https://bugzilla.suse.com/703907 SUSE Bug 703907 query.c in ISC BIND 9.0.x through 9.6.x, 9.4-ESV through 9.4-ESV-R5, 9.6-ESV through 9.6-ESV-R5, 9.7.0 through 9.7.4, 9.8.0 through 9.8.1, and 9.9.0a1 through 9.9.0b1 allows remote attackers to cause a denial of service (assertion failure and named exit) via unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver. CVE-2011-4313 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-utils-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-utils-9.6ESVR10P2-0.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/ https://www.suse.com/security/cve/CVE-2011-4313.html CVE-2011-4313 https://bugzilla.suse.com/730995 SUSE Bug 730995 https://bugzilla.suse.com/738156 SUSE Bug 738156 ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record. CVE-2012-1667 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-utils-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-utils-9.6ESVR10P2-0.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/ https://www.suse.com/security/cve/CVE-2012-1667.html CVE-2012-1667 https://bugzilla.suse.com/765315 SUSE Bug 765315 https://bugzilla.suse.com/792926 SUSE Bug 792926 ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, when DNSSEC validation is enabled, does not properly initialize the failing-query cache, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) by sending many queries. CVE-2012-3817 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-utils-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-utils-9.6ESVR10P2-0.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/ https://www.suse.com/security/cve/CVE-2012-3817.html CVE-2012-3817 https://bugzilla.suse.com/772945 SUSE Bug 772945 https://bugzilla.suse.com/792926 SUSE Bug 792926 ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a long resource record. CVE-2012-4244 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-utils-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-utils-9.6ESVR10P2-0.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/ https://www.suse.com/security/cve/CVE-2012-4244.html CVE-2012-4244 https://bugzilla.suse.com/780157 SUSE Bug 780157 https://bugzilla.suse.com/792926 SUSE Bug 792926 ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via unspecified combinations of resource records. CVE-2012-5166 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-utils-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-utils-9.6ESVR10P2-0.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/ https://www.suse.com/security/cve/CVE-2012-5166.html CVE-2012-5166 https://bugzilla.suse.com/784602 SUSE Bug 784602 https://bugzilla.suse.com/792926 SUSE Bug 792926 The query_findclosestnsec3 function in query.c in named in ISC BIND 9.6, 9.7, and 9.8 before 9.8.6-P2 and 9.9 before 9.9.4-P2, and 9.6-ESV before 9.6-ESV-R10-P2, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a crafted DNS query to an authoritative nameserver that uses the NSEC3 signing feature. CVE-2014-0591 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-utils-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-utils-9.6ESVR10P2-0.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/ https://www.suse.com/security/cve/CVE-2014-0591.html CVE-2014-0591 https://bugzilla.suse.com/858639 SUSE Bug 858639 ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory consumption and named crash) via a large or infinite number of referrals. CVE-2014-8500 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-LTSS:bind-utils-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-chrootenv-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-doc-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-32bit-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-libs-9.6ESVR10P2-0.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:bind-utils-9.6ESVR10P2-0.6.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150480-1/ https://www.suse.com/security/cve/CVE-2014-8500.html CVE-2014-8500 https://bugzilla.suse.com/908994 SUSE Bug 908994