SUSE-SU-2020:14400-1
Advisory lineage Upstream: 3 Downstream: 0
Published: 19 Jun 2020, 14:11
Last modified:04 Feb 2026, 02:20
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
19 Jun 2020, 14:11
Published
Vulnerability first disclosed
04 Feb 2026, 02:20
Last Modified
Vulnerability information updated
Description
Security update for bind This update for bind fixes the following issues: - CVE-2020-8616: Fixed the insufficient limit on the number of fetches performed when processing referrals (bsc#1171740). - CVE-2020-8617: Fixed a logic error in code which checks TSIG validity (bsc#1171740). - CVE-2018-5741: Fixed the documentation (bsc#1109160). - Removed rndc.key generation from bind.spec file (bsc#1092283, bsc#1033843) bind should create the key on first boot or if it went missing.
Affected Systems
- suse•bind&distro=SUSE Linux Enterprise Point of Sale 11 SP3
< 9.9.6P1-0.51.20.1
- suse•bind&distro=SUSE Linux Enterprise Server 11 SP4-LTSS
< 9.9.6P1-0.51.20.1
References (10)
- https://www.suse.com/support/update/announcement/2020/suse-su-202014400-1/
- https://bugzilla.suse.com/1033843
- https://bugzilla.suse.com/1092283
- https://bugzilla.suse.com/1109160
- https://bugzilla.suse.com/1171740
- https://bugzilla.suse.com/1172220
- https://bugzilla.suse.com/1172680
- https://www.suse.com/security/cve/CVE-2018-5741
- https://www.suse.com/security/cve/CVE-2020-8616
- https://www.suse.com/security/cve/CVE-2020-8617