Summary
[9.16.23-40.0.1.el9_8.1]
- Fix warning when changing device file permissions [Orabug: 36518580]
[32:9.16.23-40.1]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)
[32:9.16.23-40]
- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)
[32:9.16.23-39]
- Backport fix for nameserver line processing. (RHEL-79714)
[32:9.16.23-38]
- Add sysusers named user creation (RHEL-132053)
[32:9.16.23-37]
- Create /var/named directories for bind-chroot (RHEL-132053)
[32:9.16.23-36]
- Copy named.* files from /var/named into /usr/share/named
[32:9.16.23-35]
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
- Replace downstream fixes with upstream changes
- Address various spoofing attacks (CVE-2025-40778)
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | bind | 32:9.16.23-40.0.1.el9_8.1 |
| Oracle Linux · 9 | bind-chroot | 32:9.16.23-40.0.1.el9_8.1 |
| Oracle Linux · 9 | bind-devel | 32:9.16.23-40.0.1.el9_8.1 |
| Oracle Linux · 9 | bind-dnssec-doc | 32:9.16.23-40.0.1.el9_8.1 |
| Oracle Linux · 9 | bind-dnssec-utils | 32:9.16.23-40.0.1.el9_8.1 |
| Oracle Linux · 9 | bind-doc | 32:9.16.23-40.0.1.el9_8.1 |
| Oracle Linux · 9 | bind-libs | 32:9.16.23-40.0.1.el9_8.1 |
| Oracle Linux · 9 | bind-license | 32:9.16.23-40.0.1.el9_8.1 |
| Oracle Linux · 9 | bind-utils | 32:9.16.23-40.0.1.el9_8.1 |
| Oracle Linux · 9 | python3-bind | 32:9.16.23-40.0.1.el9_8.1 |
Vulnerabilities 1
-
High 7.5CVE-2025-8677 EPSS 11%
Resource exhaustion via malformed DNSKEY handling
Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-…