Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

SUSE 11 SP3 Advisory: 2015:1205-1 Critical: Bind Trust Anchor Issues

suse
Calendar Grey July 8, 2015
Scroller Suse
A critical SUSE upgrade for BIND addresses several vulnerabilities. Essential patch guidance and impacted products detailed.
An update that fixes two vulnerabilities is now available

Summary

bind was updated to fix two security issues: * CVE-2015-1349: A problem with trust anchor management could have caused named to crash (bsc#918330). * CVE-2015-4620: Fix resolver crash when validating (bsc#936476). Security Issues: * CVE-2015-1349 * CVE-2015-4620 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP3: zypper in -t patch sdksp3-bind=10833 - SUSE Linux Enterprise Server 11 SP3 for VMware: zypper in -t patch slessp3-bind=10833 - SUSE Linux Enterprise Server 11 SP3: zypper in -t patch slessp3-bind=10833

Topics%20covered

Topics Covered

security advisory update software patch bind important SUSE Linux trust anchor

References

#918330 #936476

Cross- CVE-2015-1349 CVE-2015-4620

Affected Products:

SUSE Linux Enterprise Software Development Kit 11 SP3

SUSE Linux Enterprise Server 11 SP3 for VMware

SUSE Linux Enterprise Server 11 SP3

SUSE Linux Enterprise Desktop 11 SP3

https://www.suse.com/security/cve/CVE-2015-1349.html

https://www.suse.com/security/cve/CVE-2015-4620.html

https://bugzilla.suse.com/918330

https://bugzilla.suse.com/936476

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2015:1205-1
Rating: important

Topics%20covered

Topics Covered

security advisory update software patch bind important SUSE Linux trust anchor

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.