Lucene search

K
suseSuseOPENSUSE-SU-2016:0859-1
HistoryMar 23, 2016 - 3:08 a.m.

Security update for bind (important)

2016-03-2303:08:21
lists.opensuse.org
6

0.968 High

EPSS

Percentile

99.6%

This update for bind fixes the following issues:

Fix two assertion failures that can lead to a remote denial of service
attack:

  • CVE-2016-1285: An error when parsing signature records for DNAME can
    lead to named exiting due to an assertion failure. (bsc#970072)
  • CVE-2016-1286: An error when parsing signature records for DNAME records
    having specific properties can lead to named exiting due to an assertion
    failure in resolver.c or db.c. (bsc#970073)

This update was imported from the SUSE:SLE-12-SP1:Update update project.