< back to search

gpp_maybe Security update for bind

SUSE-SLE-Module-Basesystem-15-SP7-2025-3903

This update for bind fixes the following issues: Upgrade to release 9.20.15: - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378). - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).

Release Date

Oct 31 2025
References

Bugzilla: 1252380, 1252378, 1252379
CVEs: CVE-2025-40778, CVE-2025-40780, CVE-2025-8677
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.7 s390x

Packages

bind
Domain Name System (DNS) Server (named)

9.20.15-150700.3.12.1 lock src

bind-utils
Libraries for "bind" and utilities to query and test DNS

9.20.15-150700.3.12.1 lock rpm

Basesystem Module 15.7 aarch64

Packages

bind
Domain Name System (DNS) Server (named)

9.20.15-150700.3.12.1 lock src

bind-utils
Libraries for "bind" and utilities to query and test DNS

9.20.15-150700.3.12.1 lock rpm

Basesystem Module 15.7 ppc64le

Packages

bind
Domain Name System (DNS) Server (named)

9.20.15-150700.3.12.1 lock src

bind-utils
Libraries for "bind" and utilities to query and test DNS

9.20.15-150700.3.12.1 lock rpm

Basesystem Module 15.7 x86_64

Packages

bind
Domain Name System (DNS) Server (named)

9.20.15-150700.3.12.1 lock src

bind-utils
Libraries for "bind" and utilities to query and test DNS

9.20.15-150700.3.12.1 lock rpm