Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

SUSE 15-SP7 Bind Important Update Denial of Service Issues 2026-1351-1

suse
Calendar Grey April 15, 2026
Scroller Suse
Update for SUSE bind resolves four issues with high severity. Critical fixes are now available to protect your systems.
An update that solves four vulnerabilities and has one security fix can now be installed.

Summary

## This update for bind fixes the following issues: Security issues: * CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service (bsc#1260805). * CVE-2026-3104: memory leak in code preparing DNSSEC proofs of non-existence allows for DoS (bsc#1260567). * CVE-2026-3119: authenticated queries containing a TKEY record may cause `named` to terminate unexpectedly (bsc#1260568). * CVE-2026-3591: stack use-after-return flaw in SIG(0) handling code allows for ACL bypass (bsc#1260569). * use-after-free error in `dns_client_resolve()` triggered by a DNAME response (bsc#1259202). Upgrade to release 9.20.21 Security Fixes: * Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations. (CVE-2026-1519) [bsc#1260805] *

Topics%20covered

Topics Covered

security advisory SuSE bind DoS important do-not-use

References

* bsc#1259202

* bsc#1260567

* bsc#1260568

* bsc#1260569

* bsc#1260805

Cross-

* CVE-2026-1519

* CVE-2026-3104

* CVE-2026-3119

* CVE-2026-3591

CVSS scores:

* CVE-2026-1519 ( SUSE ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-1519 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-1519 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-3104 ( SUSE ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-3104 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-3104 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-3119 ( SUSE ): 7.1

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:1351-1
Release Date: 2026-04-15T13:36:44Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE bind DoS important do-not-use

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.