Security update for bind SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1350-1 Final 1 1 2020-05-20T11:00:56Z current 2020-05-20T11:00:56Z 2020-05-20T11:00:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update for bind fixes the following issues: Security issues fixed: - CVE-2020-8616: Fixed the insufficient limit on the number of fetches performed when processing referrals (bsc#1171740). - CVE-2020-8617: Fixed a logic error in code which checks TSIG validity (bsc#1171740). Non-security issue fixed: - Fixed an invalid string comparison in the handling of cookie-secrets (bsc#1161168). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-Azure-BYOS-2020-1350,Image SLES12-SP4-EC2-HVM-BYOS-2020-1350,Image SLES12-SP4-GCE-BYOS-2020-1350,Image SLES12-SP4-OCI-BYOS-2020-1350,Image SLES12-SP4-SAP-Azure-2020-1350,Image SLES12-SP4-SAP-Azure-BYOS-2020-1350,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2020-1350,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2020-1350,Image SLES12-SP4-SAP-EC2-HVM-2020-1350,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2020-1350,Image SLES12-SP4-SAP-GCE-2020-1350,Image SLES12-SP4-SAP-GCE-BYOS-2020-1350,Image SLES12-SP4-SAP-OCI-BYOS-2020-1350,Image SLES12-SP5-Azure-BYOS-2020-1350,Image SLES12-SP5-Azure-Basic-On-Demand-2020-1350,Image SLES12-SP5-Azure-HPC-BYOS-2020-1350,Image SLES12-SP5-Azure-HPC-On-Demand-2020-1350,Image SLES12-SP5-Azure-SAP-BYOS-2020-1350,Image SLES12-SP5-Azure-SAP-On-Demand-2020-1350,Image SLES12-SP5-Azure-Standard-On-Demand-2020-1350,Image SLES12-SP5-EC2-BYOS-2020-1350,Image SLES12-SP5-EC2-ECS-On-Demand-2020-1350,Image SLES12-SP5-EC2-On-Demand-2020-1350,Image SLES12-SP5-EC2-SAP-BYOS-2020-1350,Image SLES12-SP5-EC2-SAP-On-Demand-2020-1350,Image SLES12-SP5-GCE-BYOS-2020-1350,Image SLES12-SP5-GCE-On-Demand-2020-1350,Image SLES12-SP5-GCE-SAP-BYOS-2020-1350,Image SLES12-SP5-GCE-SAP-On-Demand-2020-1350,Image SLES12-SP5-OCI-BYOS-BYOS-2020-1350,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2020-1350,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2020-1350,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2020-1350,SUSE-2020-1350,SUSE-SLE-SDK-12-SP4-2020-1350,SUSE-SLE-SDK-12-SP5-2020-1350,SUSE-SLE-SERVER-12-SP4-2020-1350,SUSE-SLE-SERVER-12-SP5-2020-1350 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201350-1/ Link for SUSE-SU-2020:1350-1 https://lists.suse.com/pipermail/sle-security-updates/2020-May/006841.html E-Mail link for SUSE-SU-2020:1350-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1161168 SUSE Bug 1161168 https://bugzilla.suse.com/1171740 SUSE Bug 1171740 https://www.suse.com/security/cve/CVE-2020-8616/ SUSE CVE CVE-2020-8616 page https://www.suse.com/security/cve/CVE-2020-8617/ SUSE CVE CVE-2020-8617 page Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 bind-utils-9.11.2-3.17.1 python-bind-9.11.2-3.17.1 bind-9.11.2-3.17.1 bind-chrootenv-9.11.2-3.17.1 bind-devel-9.11.2-3.17.1 bind-devel-32bit-9.11.2-3.17.1 bind-devel-64bit-9.11.2-3.17.1 bind-doc-9.11.2-3.17.1 bind-lwresd-9.11.2-3.17.1 libbind9-160-9.11.2-3.17.1 libbind9-160-32bit-9.11.2-3.17.1 libbind9-160-64bit-9.11.2-3.17.1 libdns169-9.11.2-3.17.1 libdns169-32bit-9.11.2-3.17.1 libdns169-64bit-9.11.2-3.17.1 libirs-devel-9.11.2-3.17.1 libirs160-9.11.2-3.17.1 libirs160-32bit-9.11.2-3.17.1 libirs160-64bit-9.11.2-3.17.1 libisc166-9.11.2-3.17.1 libisc166-32bit-9.11.2-3.17.1 libisc166-64bit-9.11.2-3.17.1 libisccc160-9.11.2-3.17.1 libisccc160-32bit-9.11.2-3.17.1 libisccc160-64bit-9.11.2-3.17.1 libisccfg160-9.11.2-3.17.1 libisccfg160-32bit-9.11.2-3.17.1 libisccfg160-64bit-9.11.2-3.17.1 liblwres160-9.11.2-3.17.1 liblwres160-32bit-9.11.2-3.17.1 liblwres160-64bit-9.11.2-3.17.1 bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-Azure-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-Azure-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-GCE-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-GCE-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-OCI-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-OCI-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-Azure python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-Azure bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-EC2-HVM python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-EC2-HVM bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-GCE python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-GCE bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-EC2-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-EC2-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-EC2-On-Demand python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-EC2-On-Demand bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-GCE-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-GCE-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-GCE-On-Demand python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-GCE-On-Demand bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production bind-utils-9.11.2-3.17.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python-bind-9.11.2-3.17.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production bind-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 bind-chrootenv-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 bind-doc-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 bind-utils-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 libbind9-160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 libdns169-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 libirs160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 libisc166-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 libisc166-32bit-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 libisccc160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 libisccfg160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 liblwres160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 python-bind-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP4 bind-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 bind-chrootenv-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 bind-doc-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 bind-utils-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 libbind9-160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 libdns169-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 libirs160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 libisc166-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 libisc166-32bit-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 libisccc160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 libisccfg160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 liblwres160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 python-bind-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server 12 SP5 bind-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 bind-chrootenv-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 bind-doc-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 bind-utils-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libbind9-160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libdns169-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libirs160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libisc166-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libisc166-32bit-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libisccc160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libisccfg160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 liblwres160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-bind-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 bind-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 bind-chrootenv-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 bind-doc-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 bind-utils-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libbind9-160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libdns169-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libirs160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libisc166-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libisc166-32bit-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libisccc160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libisccfg160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 liblwres160-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python-bind-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 bind-devel-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 bind-devel-9.11.2-3.17.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral. This has at least two potential effects: The performance of the recursing server can potentially be degraded by the additional work required to perform these fetches, and The attacker can exploit this behavior to use the recursing server as a reflector in a reflection attack with a high amplification factor. CVE-2020-8616 Image SLES12-SP4-Azure-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-Azure-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-EC2-HVM-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-EC2-HVM-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-GCE-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-GCE-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-OCI-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-OCI-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-EC2-HVM:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-EC2-HVM:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-GCE-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-GCE-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-GCE:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-GCE:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-OCI-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-OCI-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-Basic-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-Basic-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-HPC-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-HPC-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-HPC-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-HPC-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-SAP-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-SAP-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-SAP-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-SAP-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-Standard-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-Standard-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-EC2-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-EC2-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-EC2-ECS-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-EC2-ECS-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-EC2-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-EC2-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-EC2-SAP-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-EC2-SAP-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-EC2-SAP-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-EC2-SAP-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-GCE-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-GCE-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-GCE-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-GCE-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-GCE-SAP-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-GCE-SAP-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-GCE-SAP-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-GCE-SAP-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-OCI-BYOS-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-OCI-BYOS-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python-bind-9.11.2-3.17.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python-bind-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:bind-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:bind-chrootenv-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:bind-doc-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:bind-utils-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libbind9-160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libdns169-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libirs160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libisc166-32bit-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libisc166-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libisccc160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libisccfg160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:liblwres160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:python-bind-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:bind-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:bind-chrootenv-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:bind-doc-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:bind-utils-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libbind9-160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libdns169-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libirs160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libisc166-32bit-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libisc166-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libisccc160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libisccfg160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:liblwres160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:python-bind-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:bind-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:bind-chrootenv-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:bind-doc-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:bind-utils-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libbind9-160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdns169-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libirs160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libisc166-32bit-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libisc166-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libisccc160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libisccfg160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:liblwres160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-bind-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-chrootenv-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-doc-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-utils-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libbind9-160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdns169-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libirs160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisc166-32bit-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisc166-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisccc160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisccfg160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:liblwres160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-bind-9.11.2-3.17.1 SUSE Linux Enterprise Software Development Kit 12 SP4:bind-devel-9.11.2-3.17.1 SUSE Linux Enterprise Software Development Kit 12 SP5:bind-devel-9.11.2-3.17.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201350-1/ https://www.suse.com/security/cve/CVE-2020-8616.html CVE-2020-8616 https://bugzilla.suse.com/1109160 SUSE Bug 1109160 https://bugzilla.suse.com/1171740 SUSE Bug 1171740 Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results. CVE-2020-8617 Image SLES12-SP4-Azure-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-Azure-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-EC2-HVM-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-EC2-HVM-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-GCE-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-GCE-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-OCI-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-OCI-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-Azure:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-EC2-HVM:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-EC2-HVM:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-GCE-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-GCE-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-GCE:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-GCE:python-bind-9.11.2-3.17.1 Image SLES12-SP4-SAP-OCI-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP4-SAP-OCI-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-Basic-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-Basic-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-HPC-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-HPC-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-HPC-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-HPC-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-SAP-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-SAP-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-SAP-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-SAP-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-Azure-Standard-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-Azure-Standard-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-EC2-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-EC2-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-EC2-ECS-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-EC2-ECS-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-EC2-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-EC2-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-EC2-SAP-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-EC2-SAP-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-EC2-SAP-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-EC2-SAP-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-GCE-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-GCE-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-GCE-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-GCE-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-GCE-SAP-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-GCE-SAP-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-GCE-SAP-On-Demand:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-GCE-SAP-On-Demand:python-bind-9.11.2-3.17.1 Image SLES12-SP5-OCI-BYOS-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-OCI-BYOS-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:python-bind-9.11.2-3.17.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python-bind-9.11.2-3.17.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:bind-utils-9.11.2-3.17.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python-bind-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:bind-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:bind-chrootenv-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:bind-doc-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:bind-utils-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libbind9-160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libdns169-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libirs160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libisc166-32bit-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libisc166-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libisccc160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:libisccfg160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:liblwres160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP4:python-bind-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:bind-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:bind-chrootenv-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:bind-doc-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:bind-utils-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libbind9-160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libdns169-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libirs160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libisc166-32bit-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libisc166-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libisccc160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:libisccfg160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:liblwres160-9.11.2-3.17.1 SUSE Linux Enterprise Server 12 SP5:python-bind-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:bind-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:bind-chrootenv-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:bind-doc-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:bind-utils-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libbind9-160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libdns169-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libirs160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libisc166-32bit-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libisc166-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libisccc160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libisccfg160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:liblwres160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-bind-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-chrootenv-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-doc-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-utils-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libbind9-160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdns169-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libirs160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisc166-32bit-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisc166-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisccc160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisccfg160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:liblwres160-9.11.2-3.17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-bind-9.11.2-3.17.1 SUSE Linux Enterprise Software Development Kit 12 SP4:bind-devel-9.11.2-3.17.1 SUSE Linux Enterprise Software Development Kit 12 SP5:bind-devel-9.11.2-3.17.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201350-1/ https://www.suse.com/security/cve/CVE-2020-8617.html CVE-2020-8617 https://bugzilla.suse.com/1109160 SUSE Bug 1109160 https://bugzilla.suse.com/1171740 SUSE Bug 1171740