SUSE-SU-2026:2289-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20262289-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2289-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:2289-1
- Upstream
- Related
- Published
- 2026-06-05T14:30:00Z
- Modified
- 2026-06-06T07:30:27Z
- Summary
- Security update for bind
- Details
-
This update for bind fixes the following issues:
- CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).
- CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592).
- CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20262289-1/
- https://bugzilla.suse.com/1265591
- https://bugzilla.suse.com/1265592
- https://bugzilla.suse.com/1265594
- https://www.suse.com/security/cve/CVE-2026-3039
- https://www.suse.com/security/cve/CVE-2026-3592
- https://www.suse.com/security/cve/CVE-2026-5946