Security update for bind
This update for bind fixes the following issues: - CVE-2020-8616: Fixed the insufficient limit on the number of fetches performed when processing referrals (bsc#1171740). - CVE-2020-8617: Fixed a logic error in code which checks TSIG validity (bsc#1171740). - CVE-2018-5741: Fixed the documentation (bsc#1109160). - Removed rndc.key generation from bind.spec file (bsc#1092283, bsc#1033843) bind should create the key on first boot or if it went missing.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for bind fixes the following issues: - CVE-2020-8616: Fixed the insufficient limit on the number of fetches performed when processing referrals (bsc#1171740). - CVE-2020-8617: Fixed a logic error in code which checks TSIG validity (bsc#1171740). - CVE-2018-5741: Fixed the documentation (bsc#1109160). - Removed rndc.key generation from bind.spec file (bsc#1092283, bsc#1033843) bind should create the key on first boot or if it went missing.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1033843
- https://bugzilla.suse.com/1092283
- https://bugzilla.suse.com/1109160
- https://bugzilla.suse.com/1171740
- https://bugzilla.suse.com/1172220
- https://bugzilla.suse.com/1172680
- https://www.suse.com/security/cve/CVE-2018-5741
- https://www.suse.com/security/cve/CVE-2020-8616
- https://www.suse.com/security/cve/CVE-2020-8617
- https://www.suse.com/support/update/announcement/2020/suse-su-202014400-1/