bind-9.20.15-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2025:16721 Final 1 1 2025-10-23T00:00:00Z current 2025-10-23T00:00:00Z 2025-10-23T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z bind-9.20.15-1.1 on GA media These are all security issues fixed in the bind-9.20.15-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2025-16721 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2025-40778/ SUSE CVE CVE-2025-40778 page https://www.suse.com/security/cve/CVE-2025-40780/ SUSE CVE CVE-2025-40780 page https://www.suse.com/security/cve/CVE-2025-8677/ SUSE CVE CVE-2025-8677 page openSUSE Tumbleweed bind-9.20.15-1.1 bind-doc-9.20.15-1.1 bind-modules-bdbhpt-9.20.15-1.1 bind-modules-generic-9.20.15-1.1 bind-modules-ldap-9.20.15-1.1 bind-modules-mysql-9.20.15-1.1 bind-modules-perl-9.20.15-1.1 bind-modules-sqlite3-9.20.15-1.1 bind-utils-9.20.15-1.1 bind-9.20.15-1.1 as a component of openSUSE Tumbleweed bind-doc-9.20.15-1.1 as a component of openSUSE Tumbleweed bind-modules-bdbhpt-9.20.15-1.1 as a component of openSUSE Tumbleweed bind-modules-generic-9.20.15-1.1 as a component of openSUSE Tumbleweed bind-modules-ldap-9.20.15-1.1 as a component of openSUSE Tumbleweed bind-modules-mysql-9.20.15-1.1 as a component of openSUSE Tumbleweed bind-modules-perl-9.20.15-1.1 as a component of openSUSE Tumbleweed bind-modules-sqlite3-9.20.15-1.1 as a component of openSUSE Tumbleweed bind-utils-9.20.15-1.1 as a component of openSUSE Tumbleweed Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. CVE-2025-40778 openSUSE Tumbleweed:bind-9.20.15-1.1 openSUSE Tumbleweed:bind-doc-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-bdbhpt-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-generic-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-ldap-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-mysql-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-perl-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-sqlite3-9.20.15-1.1 openSUSE Tumbleweed:bind-utils-9.20.15-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40778.html CVE-2025-40778 https://bugzilla.suse.com/1252379 SUSE Bug 1252379 In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. CVE-2025-40780 openSUSE Tumbleweed:bind-9.20.15-1.1 openSUSE Tumbleweed:bind-doc-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-bdbhpt-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-generic-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-ldap-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-mysql-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-perl-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-sqlite3-9.20.15-1.1 openSUSE Tumbleweed:bind-utils-9.20.15-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40780.html CVE-2025-40780 https://bugzilla.suse.com/1252380 SUSE Bug 1252380 Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. CVE-2025-8677 openSUSE Tumbleweed:bind-9.20.15-1.1 openSUSE Tumbleweed:bind-doc-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-bdbhpt-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-generic-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-ldap-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-mysql-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-perl-9.20.15-1.1 openSUSE Tumbleweed:bind-modules-sqlite3-9.20.15-1.1 openSUSE Tumbleweed:bind-utils-9.20.15-1.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-8677.html CVE-2025-8677 https://bugzilla.suse.com/1252378 SUSE Bug 1252378