Security update for bind SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:4222-1 Final 1 1 2025-11-25T08:53:57Z current 2025-11-25T08:53:57Z 2025-11-25T08:53:57Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2025-4222,SUSE-MultiLinuxManagerTools-SLE-Micro-5-2025-4222,SUSE-SLE-Manager-Tools-For-Micro-5-2025-4222 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20254222-1/ Link for SUSE-SU-2025:4222-1 https://lists.suse.com/pipermail/sle-security-updates/2025-November/023353.html E-Mail link for SUSE-SU-2025:4222-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1252379 SUSE Bug 1252379 https://bugzilla.suse.com/1252380 SUSE Bug 1252380 https://www.suse.com/security/cve/CVE-2025-40778/ SUSE CVE CVE-2025-40778 page https://www.suse.com/security/cve/CVE-2025-40780/ SUSE CVE CVE-2025-40780 page SUSE Manager Client Tools for SLE Micro 5 SUSE Multi Linux Manager Tools SLE-Micro-5 bind-9.16.6-150000.12.85.1 bind-chrootenv-9.16.6-150000.12.85.1 bind-devel-9.16.6-150000.12.85.1 bind-devel-32bit-9.16.6-150000.12.85.1 bind-devel-64bit-9.16.6-150000.12.85.1 bind-doc-9.16.6-150000.12.85.1 bind-utils-9.16.6-150000.12.85.1 libbind9-1600-9.16.6-150000.12.85.1 libbind9-1600-32bit-9.16.6-150000.12.85.1 libbind9-1600-64bit-9.16.6-150000.12.85.1 libdns1605-9.16.6-150000.12.85.1 libdns1605-32bit-9.16.6-150000.12.85.1 libdns1605-64bit-9.16.6-150000.12.85.1 libirs-devel-9.16.6-150000.12.85.1 libirs1601-9.16.6-150000.12.85.1 libirs1601-32bit-9.16.6-150000.12.85.1 libirs1601-64bit-9.16.6-150000.12.85.1 libisc1606-9.16.6-150000.12.85.1 libisc1606-32bit-9.16.6-150000.12.85.1 libisc1606-64bit-9.16.6-150000.12.85.1 libisccc1600-9.16.6-150000.12.85.1 libisccc1600-32bit-9.16.6-150000.12.85.1 libisccc1600-64bit-9.16.6-150000.12.85.1 libisccfg1600-9.16.6-150000.12.85.1 libisccfg1600-32bit-9.16.6-150000.12.85.1 libisccfg1600-64bit-9.16.6-150000.12.85.1 libns1604-9.16.6-150000.12.85.1 libns1604-32bit-9.16.6-150000.12.85.1 libns1604-64bit-9.16.6-150000.12.85.1 python3-bind-9.16.6-150000.12.85.1 bind-utils-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libbind9-1600-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libbind9-1600-64bit-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libdns1605-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libdns1605-64bit-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libirs1601-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libirs1601-64bit-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libisc1606-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libisc1606-64bit-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libisccc1600-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libisccc1600-64bit-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libisccfg1600-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libisccfg1600-64bit-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 libns1604-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 python3-bind-9.16.6-150000.12.85.1 as a component of SUSE Manager Client Tools for SLE Micro 5 bind-utils-9.16.6-150000.12.85.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 libbind9-1600-9.16.6-150000.12.85.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 libdns1605-9.16.6-150000.12.85.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 libirs1601-9.16.6-150000.12.85.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 libisc1606-9.16.6-150000.12.85.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 libisccc1600-9.16.6-150000.12.85.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 libisccfg1600-9.16.6-150000.12.85.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 libns1604-9.16.6-150000.12.85.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 python3-bind-9.16.6-150000.12.85.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. CVE-2025-40778 SUSE Manager Client Tools for SLE Micro 5:bind-utils-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libbind9-1600-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libbind9-1600-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libdns1605-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libdns1605-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libirs1601-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libirs1601-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisc1606-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisc1606-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisccc1600-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisccc1600-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisccfg1600-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisccfg1600-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libns1604-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:python3-bind-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:bind-utils-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libbind9-1600-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libdns1605-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libirs1601-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libisc1606-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libisccc1600-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libisccfg1600-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libns1604-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:python3-bind-9.16.6-150000.12.85.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254222-1/ https://www.suse.com/security/cve/CVE-2025-40778.html CVE-2025-40778 https://bugzilla.suse.com/1252379 SUSE Bug 1252379 In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1. CVE-2025-40780 SUSE Manager Client Tools for SLE Micro 5:bind-utils-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libbind9-1600-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libbind9-1600-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libdns1605-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libdns1605-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libirs1601-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libirs1601-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisc1606-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisc1606-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisccc1600-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisccc1600-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisccfg1600-64bit-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libisccfg1600-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:libns1604-9.16.6-150000.12.85.1 SUSE Manager Client Tools for SLE Micro 5:python3-bind-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:bind-utils-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libbind9-1600-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libdns1605-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libirs1601-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libisc1606-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libisccc1600-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libisccfg1600-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:libns1604-9.16.6-150000.12.85.1 SUSE Multi Linux Manager Tools SLE-Micro-5:python3-bind-9.16.6-150000.12.85.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254222-1/ https://www.suse.com/security/cve/CVE-2025-40780.html CVE-2025-40780 https://bugzilla.suse.com/1252380 SUSE Bug 1252380