Skip to content
OpenAdvisories
High ELSA-2025-19835 1 CVE

Important: bind security update (Oracle Linux 8)

Published Nov 5, 2025 · Updated Nov 5, 2025

Ecosystem: Oracle Linux

Summary

[32:9.11.36-16.6]
- Address various spoofing attacks (CVE-2025-40778)

[32:9.11.36-16.5]
- Add support for max-records-per-type and max-types-per-name options
(RHEL-61936)
- Support reading of new options also in named-checkconf -z, v2

Fixed packages 17

ReleasePackageFixed in
Oracle Linux · 8 bind 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-chroot 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-devel 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-export-devel 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-export-libs 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-libs 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-libs-lite 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-license 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-lite-devel 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-pkcs11 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-pkcs11-devel 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-pkcs11-libs 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-pkcs11-utils 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-sdb 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-sdb-chroot 32:9.11.36-16.el8_10.6
Oracle Linux · 8 bind-utils 32:9.11.36-16.el8_10.6
Oracle Linux · 8 python3-bind 32:9.11.36-16.el8_10.6

Vulnerabilities 1

  • High 8.6
    CVE-2025-40778 Public exploit

    Cache poisoning attacks with unsolicited RRs

    Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi