Security update for bind SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0303-1 Final 1 1 2018-01-30T14:36:51Z current 2018-01-30T14:36:51Z 2018-01-30T14:36:51Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update for bind fixes several issues. This security issue was fixed: - CVE-2017-3145: Improper sequencing during cleanup could have lead to a use-after-free error that triggered an assertion failure and crash in named (bsc#1076118). These non-security issues were fixed: - Updated named.root file (bsc#1040039) - Update bind.keys for DNSSEC root KSK rollover (bsc#1047184) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-6-2018-220,SUSE-SLE-DESKTOP-12-SP2-2018-220,SUSE-SLE-DESKTOP-12-SP3-2018-220,SUSE-SLE-RPI-12-SP2-2018-220,SUSE-SLE-SAP-12-SP1-2018-220,SUSE-SLE-SDK-12-SP2-2018-220,SUSE-SLE-SDK-12-SP3-2018-220,SUSE-SLE-SERVER-12-SP1-2018-220,SUSE-SLE-SERVER-12-SP2-2018-220,SUSE-SLE-SERVER-12-SP3-2018-220 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180303-1/ Link for SUSE-SU-2018:0303-1 https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00102.html E-Mail link for SUSE-SU-2018:0303-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1040039 SUSE Bug 1040039 https://bugzilla.suse.com/1047184 SUSE Bug 1047184 https://bugzilla.suse.com/1076118 SUSE Bug 1076118 https://www.suse.com/security/cve/CVE-2017-3145/ SUSE CVE CVE-2017-3145 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE OpenStack Cloud 6 bind-9.9.9P1-63.7.1 bind-chrootenv-9.9.9P1-63.7.1 bind-devel-9.9.9P1-63.7.1 bind-doc-9.9.9P1-63.7.1 bind-libs-9.9.9P1-63.7.1 bind-libs-32bit-9.9.9P1-63.7.1 bind-utils-9.9.9P1-63.7.1 bind-libs-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 bind-libs-32bit-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 bind-utils-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 bind-libs-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 bind-libs-32bit-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 bind-utils-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 bind-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-chrootenv-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-devel-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-doc-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-libs-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-libs-32bit-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-utils-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP2 bind-chrootenv-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP2 bind-doc-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP2 bind-libs-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP2 bind-libs-32bit-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP2 bind-utils-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP2 bind-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP3 bind-chrootenv-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP3 bind-doc-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP3 bind-libs-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP3 bind-libs-32bit-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP3 bind-utils-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server 12 SP3 bind-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 bind-chrootenv-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 bind-doc-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 bind-libs-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 bind-utils-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 bind-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 bind-chrootenv-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 bind-devel-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 bind-doc-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 bind-libs-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 bind-libs-32bit-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 bind-utils-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 bind-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 bind-chrootenv-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 bind-doc-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 bind-libs-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 bind-libs-32bit-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 bind-utils-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 bind-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-chrootenv-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-doc-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-libs-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-libs-32bit-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-utils-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-devel-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 bind-devel-9.9.9P1-63.7.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 bind-9.9.9P1-63.7.1 as a component of SUSE OpenStack Cloud 6 bind-chrootenv-9.9.9P1-63.7.1 as a component of SUSE OpenStack Cloud 6 bind-devel-9.9.9P1-63.7.1 as a component of SUSE OpenStack Cloud 6 bind-doc-9.9.9P1-63.7.1 as a component of SUSE OpenStack Cloud 6 bind-libs-9.9.9P1-63.7.1 as a component of SUSE OpenStack Cloud 6 bind-libs-32bit-9.9.9P1-63.7.1 as a component of SUSE OpenStack Cloud 6 bind-utils-9.9.9P1-63.7.1 as a component of SUSE OpenStack Cloud 6 BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1. CVE-2017-3145 SUSE Linux Enterprise Desktop 12 SP2:bind-libs-32bit-9.9.9P1-63.7.1 SUSE Linux Enterprise Desktop 12 SP2:bind-libs-9.9.9P1-63.7.1 SUSE Linux Enterprise Desktop 12 SP2:bind-utils-9.9.9P1-63.7.1 SUSE Linux Enterprise Desktop 12 SP3:bind-libs-32bit-9.9.9P1-63.7.1 SUSE Linux Enterprise Desktop 12 SP3:bind-libs-9.9.9P1-63.7.1 SUSE Linux Enterprise Desktop 12 SP3:bind-utils-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP1-LTSS:bind-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP1-LTSS:bind-chrootenv-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP1-LTSS:bind-devel-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP1-LTSS:bind-doc-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP1-LTSS:bind-libs-32bit-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP1-LTSS:bind-libs-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP1-LTSS:bind-utils-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP2:bind-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP2:bind-chrootenv-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP2:bind-doc-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP2:bind-libs-32bit-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP2:bind-libs-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP2:bind-utils-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP3:bind-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP3:bind-chrootenv-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP3:bind-doc-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP3:bind-libs-32bit-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP3:bind-libs-9.9.9P1-63.7.1 SUSE Linux Enterprise Server 12 SP3:bind-utils-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:bind-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:bind-chrootenv-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:bind-doc-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:bind-libs-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:bind-utils-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:bind-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:bind-chrootenv-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:bind-devel-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:bind-doc-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:bind-libs-32bit-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:bind-libs-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:bind-utils-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:bind-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:bind-chrootenv-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:bind-doc-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:bind-libs-32bit-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:bind-libs-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:bind-utils-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-chrootenv-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-doc-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-libs-32bit-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-libs-9.9.9P1-63.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-utils-9.9.9P1-63.7.1 SUSE Linux Enterprise Software Development Kit 12 SP2:bind-devel-9.9.9P1-63.7.1 SUSE Linux Enterprise Software Development Kit 12 SP3:bind-devel-9.9.9P1-63.7.1 SUSE OpenStack Cloud 6:bind-9.9.9P1-63.7.1 SUSE OpenStack Cloud 6:bind-chrootenv-9.9.9P1-63.7.1 SUSE OpenStack Cloud 6:bind-devel-9.9.9P1-63.7.1 SUSE OpenStack Cloud 6:bind-doc-9.9.9P1-63.7.1 SUSE OpenStack Cloud 6:bind-libs-32bit-9.9.9P1-63.7.1 SUSE OpenStack Cloud 6:bind-libs-9.9.9P1-63.7.1 SUSE OpenStack Cloud 6:bind-utils-9.9.9P1-63.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180303-1/ https://www.suse.com/security/cve/CVE-2017-3145.html CVE-2017-3145 https://bugzilla.suse.com/1076118 SUSE Bug 1076118 https://bugzilla.suse.com/1101131 SUSE Bug 1101131 https://bugzilla.suse.com/1177790 SUSE Bug 1177790