This update for bind fixes the following issues: - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. [CVE-2016-9131, bsc#1018700, bsc#1018699] - Fix a potential assertion failure that could have been triggered by responding to a query with inconsistent DNSSEC information, thereby facilitating a denial-of-service attack. [CVE-2016-9147, bsc#1018701, bsc#1018699] - Fix potential assertion failure that could have been triggered by DNS responses that contain unusually-formed DS resource records, facilitating a denial-of-service attack. [CVE-2016-9444, bsc#1018702, bsc#1018699] - Fixed ldapdump to use a temporary pseudo nameserver that conforms to
#1018699 #1018700 #1018701 #1018702 #965748
Cross- CVE-2016-9131 CVE-2016-9147 CVE-2016-9444
Affected Products:
SUSE Linux Enterprise Server for SAP 12
SUSE Linux Enterprise Server 12-LTSS
https://www.suse.com/security/cve/CVE-2016-9131.html
https://www.suse.com/security/cve/CVE-2016-9147.html
https://www.suse.com/security/cve/CVE-2016-9444.html
https://bugzilla.suse.com/1018699
https://bugzilla.suse.com/1018700
https://bugzilla.suse.com/1018701
https://bugzilla.suse.com/1018702
https://bugzilla.suse.com/965748
Get the latest Linux and open source security news straight to your inbox.