Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2025:19793 | Mondoo Vulnerability Intelligence

RHSA-2025:19793

HIGH8.6

Red Hat Security Advisory: bind9.16 security update

Published Nov 6, 2025

Modified 1 weeks ago

Fix available

Affected Packages

Red Hat:enterprise_linux:8::appstreambind9.16

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-chroot

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-debuginfo

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-debugsource

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-devel

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-dnssec-utils

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-dnssec-utils-debuginfo

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-doc

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-libs

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-libs-debuginfo

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-license

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-utils

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreambind9.16-utils-debuginfo

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::appstreampython3-bind9.16

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-chroot

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-debuginfo

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-debugsource

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-devel

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-dnssec-utils

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-dnssec-utils-debuginfo

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-doc

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-libs

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-libs-debuginfo

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-license

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-utils

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbbind9.16-utils-debuginfo

Fixed in:

32:9.16.23-0.22.el8_10.4

Red Hat:enterprise_linux:8::crbpython3-bind9.16

Fixed in:

32:9.16.23-0.22.el8_10.4

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19793 REPORThttps://access.redhat.com/security/cve/CVE-2025-40778 REPORThttps://access.redhat.com/security/cve/CVE-2025-40780 ARTICLEhttps://access.redhat.com/security/updates/classification/#important REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2405827 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2405829 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-40778 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-40780 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19793.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-40778 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-40780

CVSS Analysis

CVSS v3.1

8.6

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

NoneC:N

Integrity

HighI:H

Availability

NoneA:N

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Upstream

CVE-2025-40778 CVE-2025-40780

Ecosystems

Red Hat enterprise_linux 8 appstream Red Hat enterprise_linux 8 crb

Timeline

PublishedNov 6, 2025

ModifiedJan 7, 2026