Security update for bind SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:1027-1 Final 1 1 2017-04-18T00:54:37Z current 2017-04-18T00:54:37Z 2017-04-18T00:54:37Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update for bind fixes the following issues: - A regression in the fix for CVE-2017-3137 caused an assert in name.c (bsc#1034162) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-bind-13063,sleclo50sp3-bind-13063,sleman21-bind-13063,slemap21-bind-13063,sleposp3-bind-13063,slessp3-bind-13063,slessp4-bind-13063 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20171027-1/ Link for SUSE-SU-2017:1027-1 https://lists.opensuse.org/opensuse-security-announce/2017-04/msg00018.html E-Mail link for SUSE-SU-2017:1027-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1034162 SUSE Bug 1034162 https://www.suse.com/security/cve/CVE-2017-3137/ SUSE CVE CVE-2017-3137 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Manager 2.1 SUSE Manager Proxy 2.1 SUSE OpenStack Cloud 5 bind-devel-9.9.6P1-0.47.1 bind-devel-32bit-9.9.6P1-0.47.1 bind-9.9.6P1-0.47.1 bind-chrootenv-9.9.6P1-0.47.1 bind-doc-9.9.6P1-0.47.1 bind-libs-9.9.6P1-0.47.1 bind-libs-32bit-9.9.6P1-0.47.1 bind-utils-9.9.6P1-0.47.1 bind-libs-x86-9.9.6P1-0.47.1 bind-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-chrootenv-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-devel-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-doc-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-libs-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-utils-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-chrootenv-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-devel-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-doc-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-libs-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-libs-32bit-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-utils-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-chrootenv-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-devel-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-doc-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-libs-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-libs-32bit-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-utils-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-chrootenv-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-doc-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-libs-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-libs-32bit-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-libs-x86-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-utils-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-chrootenv-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-doc-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-libs-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-libs-32bit-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-libs-x86-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-utils-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-devel-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 bind-devel-32bit-9.9.6P1-0.47.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 bind-9.9.6P1-0.47.1 as a component of SUSE Manager 2.1 bind-chrootenv-9.9.6P1-0.47.1 as a component of SUSE Manager 2.1 bind-devel-9.9.6P1-0.47.1 as a component of SUSE Manager 2.1 bind-doc-9.9.6P1-0.47.1 as a component of SUSE Manager 2.1 bind-libs-9.9.6P1-0.47.1 as a component of SUSE Manager 2.1 bind-libs-32bit-9.9.6P1-0.47.1 as a component of SUSE Manager 2.1 bind-utils-9.9.6P1-0.47.1 as a component of SUSE Manager 2.1 bind-9.9.6P1-0.47.1 as a component of SUSE Manager Proxy 2.1 bind-chrootenv-9.9.6P1-0.47.1 as a component of SUSE Manager Proxy 2.1 bind-devel-9.9.6P1-0.47.1 as a component of SUSE Manager Proxy 2.1 bind-doc-9.9.6P1-0.47.1 as a component of SUSE Manager Proxy 2.1 bind-libs-9.9.6P1-0.47.1 as a component of SUSE Manager Proxy 2.1 bind-libs-32bit-9.9.6P1-0.47.1 as a component of SUSE Manager Proxy 2.1 bind-utils-9.9.6P1-0.47.1 as a component of SUSE Manager Proxy 2.1 bind-9.9.6P1-0.47.1 as a component of SUSE OpenStack Cloud 5 bind-chrootenv-9.9.6P1-0.47.1 as a component of SUSE OpenStack Cloud 5 bind-devel-9.9.6P1-0.47.1 as a component of SUSE OpenStack Cloud 5 bind-doc-9.9.6P1-0.47.1 as a component of SUSE OpenStack Cloud 5 bind-libs-9.9.6P1-0.47.1 as a component of SUSE OpenStack Cloud 5 bind-libs-32bit-9.9.6P1-0.47.1 as a component of SUSE OpenStack Cloud 5 bind-utils-9.9.6P1-0.47.1 as a component of SUSE OpenStack Cloud 5 Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8. CVE-2017-3137 SUSE Linux Enterprise Point of Sale 11 SP3:bind-9.9.6P1-0.47.1 SUSE Linux Enterprise Point of Sale 11 SP3:bind-chrootenv-9.9.6P1-0.47.1 SUSE Linux Enterprise Point of Sale 11 SP3:bind-devel-9.9.6P1-0.47.1 SUSE Linux Enterprise Point of Sale 11 SP3:bind-doc-9.9.6P1-0.47.1 SUSE Linux Enterprise Point of Sale 11 SP3:bind-libs-9.9.6P1-0.47.1 SUSE Linux Enterprise Point of Sale 11 SP3:bind-utils-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-chrootenv-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-devel-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-doc-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-libs-32bit-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-libs-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-utils-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-chrootenv-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-devel-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-doc-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-32bit-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-utils-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP4:bind-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP4:bind-chrootenv-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP4:bind-doc-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP4:bind-libs-32bit-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP4:bind-libs-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP4:bind-libs-x86-9.9.6P1-0.47.1 SUSE Linux Enterprise Server 11 SP4:bind-utils-9.9.6P1-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-9.9.6P1-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-chrootenv-9.9.6P1-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-doc-9.9.6P1-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-libs-32bit-9.9.6P1-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-libs-9.9.6P1-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-libs-x86-9.9.6P1-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-utils-9.9.6P1-0.47.1 SUSE Linux Enterprise Software Development Kit 11 SP4:bind-devel-32bit-9.9.6P1-0.47.1 SUSE Linux Enterprise Software Development Kit 11 SP4:bind-devel-9.9.6P1-0.47.1 SUSE Manager 2.1:bind-9.9.6P1-0.47.1 SUSE Manager 2.1:bind-chrootenv-9.9.6P1-0.47.1 SUSE Manager 2.1:bind-devel-9.9.6P1-0.47.1 SUSE Manager 2.1:bind-doc-9.9.6P1-0.47.1 SUSE Manager 2.1:bind-libs-32bit-9.9.6P1-0.47.1 SUSE Manager 2.1:bind-libs-9.9.6P1-0.47.1 SUSE Manager 2.1:bind-utils-9.9.6P1-0.47.1 SUSE Manager Proxy 2.1:bind-9.9.6P1-0.47.1 SUSE Manager Proxy 2.1:bind-chrootenv-9.9.6P1-0.47.1 SUSE Manager Proxy 2.1:bind-devel-9.9.6P1-0.47.1 SUSE Manager Proxy 2.1:bind-doc-9.9.6P1-0.47.1 SUSE Manager Proxy 2.1:bind-libs-32bit-9.9.6P1-0.47.1 SUSE Manager Proxy 2.1:bind-libs-9.9.6P1-0.47.1 SUSE Manager Proxy 2.1:bind-utils-9.9.6P1-0.47.1 SUSE OpenStack Cloud 5:bind-9.9.6P1-0.47.1 SUSE OpenStack Cloud 5:bind-chrootenv-9.9.6P1-0.47.1 SUSE OpenStack Cloud 5:bind-devel-9.9.6P1-0.47.1 SUSE OpenStack Cloud 5:bind-doc-9.9.6P1-0.47.1 SUSE OpenStack Cloud 5:bind-libs-32bit-9.9.6P1-0.47.1 SUSE OpenStack Cloud 5:bind-libs-9.9.6P1-0.47.1 SUSE OpenStack Cloud 5:bind-utils-9.9.6P1-0.47.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171027-1/ https://www.suse.com/security/cve/CVE-2017-3137.html CVE-2017-3137 https://bugzilla.suse.com/1018700 SUSE Bug 1018700 https://bugzilla.suse.com/1018701 SUSE Bug 1018701 https://bugzilla.suse.com/1018702 SUSE Bug 1018702 https://bugzilla.suse.com/1024130 SUSE Bug 1024130 https://bugzilla.suse.com/1033461 SUSE Bug 1033461 https://bugzilla.suse.com/1033466 SUSE Bug 1033466 https://bugzilla.suse.com/1033467 SUSE Bug 1033467 https://bugzilla.suse.com/1034162 SUSE Bug 1034162 https://bugzilla.suse.com/1076118 SUSE Bug 1076118 https://bugzilla.suse.com/1081545 SUSE Bug 1081545