p PatchFirst

SUSE-SU-2025:3903-1

SUSE-SU-2025:3903-1 · Security update for bind

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for bind fixes the following issues: Upgrade to release 9.20.15: - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378). - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 9.20.15-150700.3.12.1

    Update to 9.20.15-150700.3.12.1

  • bind SUSE:Linux Enterprise Module for Server Applications 15 SP7

    Affected ranges
    • ECOSYSTEM: < 9.20.15-150700.3.12.1

    Update to 9.20.15-150700.3.12.1

Original sources

Check your server →