Security update for bind SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1616-1 Final 1 1 2022-05-31T12:21:04Z current 2022-05-31T12:21:04Z 2022-05-31T12:21:04Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update for bind fixes the following issues: - CVE-2021-25220: Fixed potentially incorrect answers by cached forwarders (bsc#1197135). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2022-1616,SUSE-2022-1616,SUSE-OpenStack-Cloud-8-2022-1616,SUSE-OpenStack-Cloud-Crowbar-8-2022-1616,SUSE-SLE-SAP-12-SP3-2022-1616,SUSE-SLE-SERVER-12-SP2-BCL-2022-1616,SUSE-SLE-SERVER-12-SP3-2022-1616,SUSE-SLE-SERVER-12-SP3-BCL-2022-1616 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221616-1/ Link for SUSE-SU-2022:1616-1 https://lists.suse.com/pipermail/sle-security-updates/2022-May/011206.html E-Mail link for SUSE-SU-2022:1616-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1197135 SUSE Bug 1197135 https://www.suse.com/security/cve/CVE-2021-25220/ SUSE CVE CVE-2021-25220 page HPE Helion OpenStack 8 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 bind-9.9.9P1-63.34.1 bind-chrootenv-9.9.9P1-63.34.1 bind-doc-9.9.9P1-63.34.1 bind-libs-9.9.9P1-63.34.1 bind-libs-32bit-9.9.9P1-63.34.1 bind-utils-9.9.9P1-63.34.1 bind-devel-9.9.9P1-63.34.1 bind-libs-64bit-9.9.9P1-63.34.1 bind-lwresd-9.9.9P1-63.34.1 bind-9.9.9P1-63.34.1 as a component of HPE Helion OpenStack 8 bind-chrootenv-9.9.9P1-63.34.1 as a component of HPE Helion OpenStack 8 bind-doc-9.9.9P1-63.34.1 as a component of HPE Helion OpenStack 8 bind-libs-9.9.9P1-63.34.1 as a component of HPE Helion OpenStack 8 bind-libs-32bit-9.9.9P1-63.34.1 as a component of HPE Helion OpenStack 8 bind-utils-9.9.9P1-63.34.1 as a component of HPE Helion OpenStack 8 bind-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL bind-chrootenv-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL bind-doc-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL bind-libs-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL bind-libs-32bit-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL bind-utils-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL bind-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL bind-chrootenv-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL bind-doc-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL bind-libs-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL bind-libs-32bit-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL bind-utils-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL bind-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS bind-chrootenv-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS bind-doc-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS bind-libs-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS bind-libs-32bit-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS bind-utils-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS bind-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-chrootenv-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-doc-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-libs-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-libs-32bit-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-utils-9.9.9P1-63.34.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 bind-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud 8 bind-chrootenv-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud 8 bind-doc-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud 8 bind-libs-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud 8 bind-libs-32bit-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud 8 bind-utils-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud 8 bind-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud Crowbar 8 bind-chrootenv-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud Crowbar 8 bind-doc-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud Crowbar 8 bind-libs-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud Crowbar 8 bind-libs-32bit-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud Crowbar 8 bind-utils-9.9.9P1-63.34.1 as a component of SUSE OpenStack Cloud Crowbar 8 BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients. CVE-2021-25220 HPE Helion OpenStack 8:bind-9.9.9P1-63.34.1 HPE Helion OpenStack 8:bind-chrootenv-9.9.9P1-63.34.1 HPE Helion OpenStack 8:bind-doc-9.9.9P1-63.34.1 HPE Helion OpenStack 8:bind-libs-32bit-9.9.9P1-63.34.1 HPE Helion OpenStack 8:bind-libs-9.9.9P1-63.34.1 HPE Helion OpenStack 8:bind-utils-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP2-BCL:bind-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP2-BCL:bind-chrootenv-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP2-BCL:bind-doc-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP2-BCL:bind-libs-32bit-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP2-BCL:bind-libs-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP2-BCL:bind-utils-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-BCL:bind-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-BCL:bind-chrootenv-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-BCL:bind-doc-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-BCL:bind-libs-32bit-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-BCL:bind-libs-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-BCL:bind-utils-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-LTSS:bind-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-LTSS:bind-chrootenv-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-LTSS:bind-doc-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-LTSS:bind-libs-32bit-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-LTSS:bind-libs-9.9.9P1-63.34.1 SUSE Linux Enterprise Server 12 SP3-LTSS:bind-utils-9.9.9P1-63.34.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-9.9.9P1-63.34.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-chrootenv-9.9.9P1-63.34.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-doc-9.9.9P1-63.34.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-libs-32bit-9.9.9P1-63.34.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-libs-9.9.9P1-63.34.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:bind-utils-9.9.9P1-63.34.1 SUSE OpenStack Cloud 8:bind-9.9.9P1-63.34.1 SUSE OpenStack Cloud 8:bind-chrootenv-9.9.9P1-63.34.1 SUSE OpenStack Cloud 8:bind-doc-9.9.9P1-63.34.1 SUSE OpenStack Cloud 8:bind-libs-32bit-9.9.9P1-63.34.1 SUSE OpenStack Cloud 8:bind-libs-9.9.9P1-63.34.1 SUSE OpenStack Cloud 8:bind-utils-9.9.9P1-63.34.1 SUSE OpenStack Cloud Crowbar 8:bind-9.9.9P1-63.34.1 SUSE OpenStack Cloud Crowbar 8:bind-chrootenv-9.9.9P1-63.34.1 SUSE OpenStack Cloud Crowbar 8:bind-doc-9.9.9P1-63.34.1 SUSE OpenStack Cloud Crowbar 8:bind-libs-32bit-9.9.9P1-63.34.1 SUSE OpenStack Cloud Crowbar 8:bind-libs-9.9.9P1-63.34.1 SUSE OpenStack Cloud Crowbar 8:bind-utils-9.9.9P1-63.34.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221616-1/ https://www.suse.com/security/cve/CVE-2021-25220.html CVE-2021-25220 https://bugzilla.suse.com/1197135 SUSE Bug 1197135