Security update for bind SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2022:0151-1 Final 1 1 2022-01-21T11:41:01Z current 2022-01-21T11:41:01Z 2022-01-21T11:41:01Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update for bind fixes the following issues: - CVE-2021-25219: Fixed flaw that allowed abusing lame cache to severely degrade resolver performance (bsc#1192146). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2022-151,openSUSE-SLE-15.3-2022-151 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LJ7DM7F3IHCRMEZDBDGMA5O6A5EWNQKE/ E-Mail link for openSUSE-SU-2022:0151-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1192146 SUSE Bug 1192146 https://www.suse.com/security/cve/CVE-2021-25219/ SUSE CVE CVE-2021-25219 page SUSE Package Hub 15 SP3 openSUSE Leap 15.3 htmldoc-1.9.12-bp153.2.15.1 bind-9.16.6-150300.22.13.1 bind-chrootenv-9.16.6-150300.22.13.1 bind-devel-9.16.6-150300.22.13.1 bind-doc-9.16.6-150300.22.13.1 bind-utils-9.16.6-150300.22.13.1 libbind9-1600-9.16.6-150300.22.13.1 libdns1605-9.16.6-150300.22.13.1 libirs-devel-9.16.6-150300.22.13.1 libirs1601-9.16.6-150300.22.13.1 libisc1606-9.16.6-150300.22.13.1 libisccc1600-9.16.6-150300.22.13.1 libisccfg1600-9.16.6-150300.22.13.1 libns1604-9.16.6-150300.22.13.1 python3-bind-9.16.6-150300.22.13.1 htmldoc-1.9.12-bp153.2.15.1 as a component of SUSE Package Hub 15 SP3 htmldoc-1.9.12-bp153.2.15.1 as a component of openSUSE Leap 15.3 bind-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 bind-chrootenv-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 bind-devel-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 bind-doc-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 bind-utils-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 libbind9-1600-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 libdns1605-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 libirs-devel-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 libirs1601-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 libisc1606-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 libisccc1600-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 libisccfg1600-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 libns1604-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 python3-bind-9.16.6-150300.22.13.1 as a component of openSUSE Leap 15.3 In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing. CVE-2021-25219 SUSE Package Hub 15 SP3:htmldoc-1.9.12-bp153.2.15.1 openSUSE Leap 15.3:bind-9.16.6-150300.22.13.1 openSUSE Leap 15.3:bind-chrootenv-9.16.6-150300.22.13.1 openSUSE Leap 15.3:bind-devel-9.16.6-150300.22.13.1 openSUSE Leap 15.3:bind-doc-9.16.6-150300.22.13.1 openSUSE Leap 15.3:bind-utils-9.16.6-150300.22.13.1 openSUSE Leap 15.3:htmldoc-1.9.12-bp153.2.15.1 openSUSE Leap 15.3:libbind9-1600-9.16.6-150300.22.13.1 openSUSE Leap 15.3:libdns1605-9.16.6-150300.22.13.1 openSUSE Leap 15.3:libirs-devel-9.16.6-150300.22.13.1 openSUSE Leap 15.3:libirs1601-9.16.6-150300.22.13.1 openSUSE Leap 15.3:libisc1606-9.16.6-150300.22.13.1 openSUSE Leap 15.3:libisccc1600-9.16.6-150300.22.13.1 openSUSE Leap 15.3:libisccfg1600-9.16.6-150300.22.13.1 openSUSE Leap 15.3:libns1604-9.16.6-150300.22.13.1 openSUSE Leap 15.3:python3-bind-9.16.6-150300.22.13.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LJ7DM7F3IHCRMEZDBDGMA5O6A5EWNQKE/ https://www.suse.com/security/cve/CVE-2021-25219.html CVE-2021-25219 https://bugzilla.suse.com/1192146 SUSE Bug 1192146