SUSE-SU-2023:3821-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2023/suse-su-20233821-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3821-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2023:3821-1
Related
Published
2023-09-27T16:38:36Z
Modified
2023-09-27T16:38:36Z
Summary
Security update for bind
Details

This update for bind fixes the following issues:

Update to release 9.16.44:

  • CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472).

Update to release 9.16.43

  • Processing already-queued queries received over TCP could cause an assertion failure, when the server was reconfigured at the same time or the cache was being flushed. This has been fixed.
References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP5 / bind

Package

Name
bind
Purl
pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.16.44-150500.8.12.2

Ecosystem specific 

{
    "binaries": [
        {
            "bind-utils": "9.16.44-150500.8.12.2",
            "python3-bind": "9.16.44-150500.8.12.2"
        }
    ]
}

SUSE:Linux Enterprise Module for Server Applications 15 SP5 / bind

Package

Name
bind
Purl
pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.16.44-150500.8.12.2

Ecosystem specific 

{
    "binaries": [
        {
            "bind-doc": "9.16.44-150500.8.12.2",
            "bind": "9.16.44-150500.8.12.2"
        }
    ]
}

openSUSE:Leap 15.5 / bind

Package

Name
bind
Purl
pkg:rpm/opensuse/bind&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.16.44-150500.8.12.2

Ecosystem specific 

{
    "binaries": [
        {
            "bind-doc": "9.16.44-150500.8.12.2",
            "bind": "9.16.44-150500.8.12.2",
            "bind-utils": "9.16.44-150500.8.12.2",
            "python3-bind": "9.16.44-150500.8.12.2"
        }
    ]
}