gpp_maybe Security update for bind
SUSE-SLE-Module-Server-Applications-15-SP7-2026-348


This update for bind fixes the following issues: Upgrade to release 9.20.18: - CVE-2025-13878: Fixed incorrect length checks for BRID and HHIT records (bsc#1256997) Feature Changes: * Add more information to the rndc recursing output about fetches. * Reduce the number of outgoing queries. * Provide more information when memory allocation fails. Bug Fixes: * Make DNSSEC key rollovers more robust. * Fix a catalog zone issue, where member zones could fail to load. * Allow glue in delegations with QTYPE=ANY. * Fix slow speed when signing a large delegation zone with NSEC3 opt-out. * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to be invalid. * Fix a possible catalog zone issue during reconfiguration. * Fix the charts in the statistics channel. * Adding NSEC3 opt-out records could leave invalid records in chain. * Fix spurious timeouts while resolving names. * Fix bug where zone switches from NSEC3 to NSEC after retransfer. * AMTRELAY type 0 presentation format handling was wrong. * Fix parsing bug in remote-servers with key or TLS. * Fix DoT reconfigure/reload bug in the resolver. * Skip unsupported algorithms when looking for a signing key. * Fix dnssec-keygen key collision checking for KEY RRtype keys. * dnssec-verify now uses exit code 1 when failing due to illegal options. * Prevent assertion failures of dig when a server is specified before the -b option. * Skip buffer allocations if not logging.

  • Release Date
    Jan 30 2026
  • References
    Bugzilla: 1256997
    CVEs: CVE-2025-13878
  • Type
    security
  • Severity
    important

cloud_download Downloads

Server Applications Module 15.7 x86_64
  • Packages
    bind
    Domain Name System (DNS) Server (named)
    9.20.18-150700.3.15.1 lock rpm lock src
    bind-doc
    BIND documentation
    9.20.18-150700.3.15.1 lock rpm
Server Applications Module 15.7 aarch64
  • Packages
    bind
    Domain Name System (DNS) Server (named)
    9.20.18-150700.3.15.1 lock rpm lock src
    bind-doc
    BIND documentation
    9.20.18-150700.3.15.1 lock rpm
Server Applications Module 15.7 s390x
  • Packages
    bind
    Domain Name System (DNS) Server (named)
    9.20.18-150700.3.15.1 lock rpm lock src
    bind-doc
    BIND documentation
    9.20.18-150700.3.15.1 lock rpm
Server Applications Module 15.7 ppc64le
  • Packages
    bind
    Domain Name System (DNS) Server (named)
    9.20.18-150700.3.15.1 lock rpm lock src
    bind-doc
    BIND documentation
    9.20.18-150700.3.15.1 lock rpm