stable

bind-9.18.41-1.fc44 and bind-dyndb-ldap-11.11-8.fc44

FEDORA-2025-5a73e9e251 created by pemensik 12 months ago for Fedora 44

Update to 9.18.41 (#2405786)

Security fixes:

DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677)
Address various spoofing attacks. (CVE-2025-40778)
Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

New Features:

Support for parsing HHIT and BRID records has been added.

Removed Features:

Deprecate the "tkey-domain" statement.
Deprecate the "tkey-gssapi-credential" statement.

Bug Fixes:

Prevent spurious SERVFAILs for certain 0-TTL resource records.
Missing DNSSEC information when CD bit is set in query.

https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/notes.html#notes-for-bind-9-18-41

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-5a73e9e251

This update's test gating status has been changed to 'waiting'.

12 months ago

This update's test gating status has been changed to 'failed'.

12 months ago

This update's test gating status has been changed to 'passed'.

12 months ago

This update has been submitted for stable by bodhi

12 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

0 days

Dates

submitted

12 months ago

in testing

12 months ago

in stable

12 months ago

approved

12 months ago

Builds

bind-9.18.41-1.fc44

bind-dyndb-ldap-11.11-8.fc44

BZ#2405786 bind-9.18.41 is available

bind-9.18.41-1.fc44

bind-dyndb-ldap-11.11-8.fc44

Automated Test Results

passed

Test Cases


0	0	Test Case bind