Security update for bind SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:0594-1 Final 1 1 2017-03-02T14:24:48Z current 2017-03-02T14:24:48Z 2017-03-02T14:24:48Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update for bind fixes the following issues: - Fixed a possible denial of service vulnerability (affected only configurations using both DNS64 and RPZ, CVE-2017-3135, bsc#1024130) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-SAP-12-2017-310,SUSE-SLE-SERVER-12-2017-310 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20170594-1/ Link for SUSE-SU-2017:0594-1 https://lists.suse.com/pipermail/sle-security-updates/2017-March/002672.html E-Mail link for SUSE-SU-2017:0594-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1024130 SUSE Bug 1024130 https://www.suse.com/security/cve/CVE-2017-3135/ SUSE CVE CVE-2017-3135 page SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for SAP Applications 12 bind-9.9.9P1-28.29.1 bind-chrootenv-9.9.9P1-28.29.1 bind-doc-9.9.9P1-28.29.1 bind-libs-9.9.9P1-28.29.1 bind-libs-32bit-9.9.9P1-28.29.1 bind-utils-9.9.9P1-28.29.1 bind-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server 12-LTSS bind-chrootenv-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server 12-LTSS bind-doc-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server 12-LTSS bind-libs-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server 12-LTSS bind-libs-32bit-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server 12-LTSS bind-utils-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server 12-LTSS bind-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 bind-chrootenv-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 bind-doc-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 bind-libs-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 bind-libs-32bit-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 bind-utils-9.9.9P1-28.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1. CVE-2017-3135 SUSE Linux Enterprise Server 12-LTSS:bind-9.9.9P1-28.29.1 SUSE Linux Enterprise Server 12-LTSS:bind-chrootenv-9.9.9P1-28.29.1 SUSE Linux Enterprise Server 12-LTSS:bind-doc-9.9.9P1-28.29.1 SUSE Linux Enterprise Server 12-LTSS:bind-libs-32bit-9.9.9P1-28.29.1 SUSE Linux Enterprise Server 12-LTSS:bind-libs-9.9.9P1-28.29.1 SUSE Linux Enterprise Server 12-LTSS:bind-utils-9.9.9P1-28.29.1 SUSE Linux Enterprise Server for SAP Applications 12:bind-9.9.9P1-28.29.1 SUSE Linux Enterprise Server for SAP Applications 12:bind-chrootenv-9.9.9P1-28.29.1 SUSE Linux Enterprise Server for SAP Applications 12:bind-doc-9.9.9P1-28.29.1 SUSE Linux Enterprise Server for SAP Applications 12:bind-libs-32bit-9.9.9P1-28.29.1 SUSE Linux Enterprise Server for SAP Applications 12:bind-libs-9.9.9P1-28.29.1 SUSE Linux Enterprise Server for SAP Applications 12:bind-utils-9.9.9P1-28.29.1 moderate 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20170594-1/ https://www.suse.com/security/cve/CVE-2017-3135.html CVE-2017-3135 https://bugzilla.suse.com/1018700 SUSE Bug 1018700 https://bugzilla.suse.com/1018701 SUSE Bug 1018701 https://bugzilla.suse.com/1018702 SUSE Bug 1018702 https://bugzilla.suse.com/1024130 SUSE Bug 1024130 https://bugzilla.suse.com/1033466 SUSE Bug 1033466