SUSE-SU-2025:4110-1

UNKNOWN

Security update for bind

Published Nov 14, 2025

Modified 2 months ago

Fix available

This update for bind fixes the following issues:

CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378).
CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).

SUSE:Linux Enterprise Module for Basesystem 15 SP6bind

Fixed in:

9.18.33-150600.3.18.1

SUSE:Linux Enterprise Module for Basesystem 15 SP6bind-utils

Fixed in:

9.18.33-150600.3.18.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6bind

Fixed in:

9.18.33-150600.3.18.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6bind-doc

Fixed in:

9.18.33-150600.3.18.1

openSUSE:Leap 15.6bind

Fixed in:

9.18.33-150600.3.18.1

openSUSE:Leap 15.6bind-doc

Fixed in:

9.18.33-150600.3.18.1

openSUSE:Leap 15.6bind-utils

Fixed in:

9.18.33-150600.3.18.1

PublishedNov 14, 2025

ModifiedNov 14, 2025

SUSE-SU-2025:4110-1 | Mondoo Vulnerability Intelligence