Security update for bind SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0362-1 Final 1 1 2018-02-05T07:33:08Z current 2018-02-05T07:33:08Z 2018-02-05T07:33:08Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update for bind fixes several issues. This security issue was fixed: - CVE-2017-3145: Improper sequencing during cleanup could have lead to a use-after-free error that triggered an assertion failure and crash in named (bsc#1076118). These non-security issues were fixed: - Updated named.root file (bsc#1040039) - Update bind.keys for DNSSEC root KSK rollover (bsc#1047184) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-bind-13455,sleposp3-bind-13455,slessp3-bind-13455,slessp4-bind-13455 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180362-1/ Link for SUSE-SU-2018:0362-1 https://lists.opensuse.org/opensuse-security-announce/2018-02/msg00006.html E-Mail link for SUSE-SU-2018:0362-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1040039 SUSE Bug 1040039 https://bugzilla.suse.com/1047184 SUSE Bug 1047184 https://bugzilla.suse.com/1076118 SUSE Bug 1076118 https://www.suse.com/security/cve/CVE-2017-3145/ SUSE CVE CVE-2017-3145 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 bind-devel-9.9.6P1-0.51.7.1 bind-devel-32bit-9.9.6P1-0.51.7.1 bind-9.9.6P1-0.51.7.1 bind-chrootenv-9.9.6P1-0.51.7.1 bind-doc-9.9.6P1-0.51.7.1 bind-libs-9.9.6P1-0.51.7.1 bind-utils-9.9.6P1-0.51.7.1 bind-libs-32bit-9.9.6P1-0.51.7.1 bind-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-chrootenv-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-devel-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-doc-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-libs-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-utils-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 bind-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-chrootenv-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-devel-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-doc-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-libs-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-libs-32bit-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-utils-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS bind-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-chrootenv-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-devel-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-doc-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-libs-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-libs-32bit-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-utils-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA bind-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-chrootenv-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-doc-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-libs-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-libs-32bit-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-utils-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server 11 SP4 bind-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-chrootenv-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-doc-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-libs-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-libs-32bit-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-utils-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 bind-devel-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 bind-devel-32bit-9.9.6P1-0.51.7.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1. CVE-2017-3145 SUSE Linux Enterprise Point of Sale 11 SP3:bind-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Point of Sale 11 SP3:bind-chrootenv-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Point of Sale 11 SP3:bind-devel-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Point of Sale 11 SP3:bind-doc-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Point of Sale 11 SP3:bind-libs-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Point of Sale 11 SP3:bind-utils-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-chrootenv-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-devel-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-doc-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-libs-32bit-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-libs-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-LTSS:bind-utils-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-chrootenv-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-devel-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-doc-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-32bit-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-libs-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:bind-utils-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP4:bind-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP4:bind-chrootenv-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP4:bind-doc-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP4:bind-libs-32bit-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP4:bind-libs-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server 11 SP4:bind-utils-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-chrootenv-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-doc-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-libs-32bit-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-libs-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:bind-utils-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:bind-devel-32bit-9.9.6P1-0.51.7.1 SUSE Linux Enterprise Software Development Kit 11 SP4:bind-devel-9.9.6P1-0.51.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180362-1/ https://www.suse.com/security/cve/CVE-2017-3145.html CVE-2017-3145 https://bugzilla.suse.com/1076118 SUSE Bug 1076118 https://bugzilla.suse.com/1101131 SUSE Bug 1101131 https://bugzilla.suse.com/1177790 SUSE Bug 1177790