RLSA-2025:21111

Synopsis

Important: bind9.18 security update

Description

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

* bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

* bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

* bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2405827 2405829 2405830

CVEs

CVE-2025-40778 CVE-2025-40780 CVE-2025-8677

Affected packages

Rocky Linux 9 aarch64 - AppStream

bind9.18-32:9.18.29-5.el9_7.2.aarch64.rpm bind9.18-32:9.18.29-5.el9_7.2.src.rpm bind9.18-chroot-32:9.18.29-5.el9_7.2.aarch64.rpm bind9.18-debuginfo-32:9.18.29-5.el9_7.2.aarch64.rpm bind9.18-debugsource-32:9.18.29-5.el9_7.2.aarch64.rpm bind9.18-dnssec-utils-32:9.18.29-5.el9_7.2.aarch64.rpm bind9.18-dnssec-utils-debuginfo-32:9.18.29-5.el9_7.2.aarch64.rpm bind9.18-libs-32:9.18.29-5.el9_7.2.aarch64.rpm bind9.18-libs-debuginfo-32:9.18.29-5.el9_7.2.aarch64.rpm bind9.18-utils-32:9.18.29-5.el9_7.2.aarch64.rpm bind9.18-utils-debuginfo-32:9.18.29-5.el9_7.2.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

bind9.18-32:9.18.29-5.el9_7.2.ppc64le.rpm bind9.18-32:9.18.29-5.el9_7.2.src.rpm bind9.18-chroot-32:9.18.29-5.el9_7.2.ppc64le.rpm bind9.18-debuginfo-32:9.18.29-5.el9_7.2.ppc64le.rpm bind9.18-debugsource-32:9.18.29-5.el9_7.2.ppc64le.rpm bind9.18-dnssec-utils-32:9.18.29-5.el9_7.2.ppc64le.rpm bind9.18-dnssec-utils-debuginfo-32:9.18.29-5.el9_7.2.ppc64le.rpm bind9.18-libs-32:9.18.29-5.el9_7.2.ppc64le.rpm bind9.18-libs-debuginfo-32:9.18.29-5.el9_7.2.ppc64le.rpm bind9.18-utils-32:9.18.29-5.el9_7.2.ppc64le.rpm bind9.18-utils-debuginfo-32:9.18.29-5.el9_7.2.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

bind9.18-32:9.18.29-5.el9_7.2.s390x.rpm bind9.18-32:9.18.29-5.el9_7.2.src.rpm bind9.18-chroot-32:9.18.29-5.el9_7.2.s390x.rpm bind9.18-debuginfo-32:9.18.29-5.el9_7.2.s390x.rpm bind9.18-debugsource-32:9.18.29-5.el9_7.2.s390x.rpm bind9.18-dnssec-utils-32:9.18.29-5.el9_7.2.s390x.rpm bind9.18-dnssec-utils-debuginfo-32:9.18.29-5.el9_7.2.s390x.rpm bind9.18-libs-32:9.18.29-5.el9_7.2.s390x.rpm bind9.18-libs-debuginfo-32:9.18.29-5.el9_7.2.s390x.rpm bind9.18-utils-32:9.18.29-5.el9_7.2.s390x.rpm bind9.18-utils-debuginfo-32:9.18.29-5.el9_7.2.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

bind9.18-32:9.18.29-5.el9_7.2.src.rpm bind9.18-32:9.18.29-5.el9_7.2.x86_64.rpm bind9.18-chroot-32:9.18.29-5.el9_7.2.x86_64.rpm bind9.18-debuginfo-32:9.18.29-5.el9_7.2.x86_64.rpm bind9.18-debugsource-32:9.18.29-5.el9_7.2.x86_64.rpm bind9.18-dnssec-utils-32:9.18.29-5.el9_7.2.x86_64.rpm bind9.18-dnssec-utils-debuginfo-32:9.18.29-5.el9_7.2.x86_64.rpm bind9.18-libs-32:9.18.29-5.el9_7.2.x86_64.rpm bind9.18-libs-debuginfo-32:9.18.29-5.el9_7.2.x86_64.rpm bind9.18-utils-32:9.18.29-5.el9_7.2.x86_64.rpm bind9.18-utils-debuginfo-32:9.18.29-5.el9_7.2.x86_64.rpm

Rocky Linux 9 x86_64 - CRB

bind9.18-debuginfo-32:9.18.29-5.el9_7.2.i686.rpm bind9.18-debugsource-32:9.18.29-5.el9_7.2.i686.rpm bind9.18-devel-32:9.18.29-5.el9_7.2.i686.rpm bind9.18-devel-32:9.18.29-5.el9_7.2.x86_64.rpm bind9.18-doc-32:9.18.29-5.el9_7.2.noarch.rpm bind9.18-libs-32:9.18.29-5.el9_7.2.i686.rpm bind9.18-libs-debuginfo-32:9.18.29-5.el9_7.2.i686.rpm

Rocky Linux 9 aarch64 - CRB

bind9.18-devel-32:9.18.29-5.el9_7.2.aarch64.rpm bind9.18-doc-32:9.18.29-5.el9_7.2.noarch.rpm

Rocky Linux 9 ppc64le - CRB

bind9.18-devel-32:9.18.29-5.el9_7.2.ppc64le.rpm bind9.18-doc-32:9.18.29-5.el9_7.2.noarch.rpm

Rocky Linux 9 s390x - CRB

bind9.18-devel-32:9.18.29-5.el9_7.2.s390x.rpm bind9.18-doc-32:9.18.29-5.el9_7.2.noarch.rpm