Skip to content
OpenAdvisories
High RHSA-2025:19835 1 CVE

Red Hat Security Advisory: bind security update

Published Nov 6, 2025 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 38

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream bind 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-chroot 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-debugsource 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-devel 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-export-libs-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs-lite 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs-lite-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-license 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-lite-devel 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-devel 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-libs 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-libs-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-utils 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-utils-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-sdb 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-sdb-chroot 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-sdb-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-utils 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-utils-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-bind 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-debugsource 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-export-devel 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-export-libs 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-export-libs-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-libs-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-libs-lite-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-pkcs11-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-pkcs11-libs-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-pkcs11-utils-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-sdb-debuginfo 32:9.11.36-16.el8_10.6
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-utils-debuginfo 32:9.11.36-16.el8_10.6

Vulnerabilities 1

  • High 8.6
    CVE-2025-40778 Public exploit

    Cache poisoning attacks with unsolicited RRs

    Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2405827
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19835.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-40778
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-40778
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-40778