SUSE-SU-2023:2954-1: Security update for bind
This update for bind fixes the following issues: CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libbind9to a version that resolves this vulnerability.Fixed in 1600-debuginfo-9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libbind9to a version that resolves this vulnerability.Fixed in 1600-9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libdns1605to a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libisccfg1600-debuginfoto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libns1604to a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libirs-develto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libisc1606-debuginfoto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libisccfg1600to a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libisccc1600to a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libdns1605-debuginfoto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/bindto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/bind-utils-debuginfoto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libirs1601to a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/bind-chrootenvto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libns1604-debuginfoto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libisccc1600-debuginfoto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/bind-develto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libirs1601-debuginfoto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/bind-debugsourceto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/bind-utilsto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/bind-debuginfoto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/libisc1606to a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/python3-bindto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
suse/bind-docto a version that resolves this vulnerability.Fixed in 9.16.6-150300.22.30.1 - Upgrade
Upgrade
Basesystem Module 15-SP4to a version that resolves this vulnerability.Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2954=1 - Upgrade
Upgrade
Basesystem Module 15-SP5to a version that resolves this vulnerability.Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2954=1 - Upgrade
Upgrade
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3to a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2954=1 - Upgrade
Upgrade
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3to a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2954=1 - Upgrade
Upgrade
SUSE Linux Enterprise Real Time 15 SP3to a version that resolves this vulnerability.Patch SUSE-SLE-Product-RT-15-SP3-2023-2954=1 - Upgrade
Upgrade
SUSE Linux Enterprise Server 15 SP3 LTSSto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2954=1 - Upgrade
Upgrade
SUSE Linux Enterprise Server for SAP Applications 15 SP3to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2954=1 - Upgrade
Upgrade
SUSE Manager Proxy 4.2to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-2954=1 - Upgrade
Upgrade
SUSE Manager Retail Branch Server 4.2to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-2954=1 - Upgrade
Upgrade
SUSE Manager Server 4.2to a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2954=1 - Upgrade
Upgrade
SUSE Enterprise Storage 7.1to a version that resolves this vulnerability.Patch SUSE-Storage-7.1-2023-2954=1 - Upgrade
Upgrade
openSUSE Leap 15.4to a version that resolves this vulnerability.Patch openSUSE-SLE-15.4-2023-2954=1 - Upgrade
Upgrade
bindto a version that resolves this vulnerability.Patch SUSE-2023-2954