Update to 9.18.41 (#2405786)

Security fixes:

DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677)
Address various spoofing attacks. (CVE-2025-40778)
Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

New Features:

Support for parsing HHIT and BRID records has been added.

Removed Features:

Deprecate the "tkey-domain" statement.
Deprecate the "tkey-gssapi-credential" statement.

Bug Fixes:

Prevent spurious SERVFAILs for certain 0-TTL resource records.
Missing DNSSEC information when CD bit is set in query.

https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/notes.html#notes-for-bind-9-18-41

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-66fb3fa6b0

This update's test gating status has been changed to 'waiting'.

4 months ago

This update has been submitted for testing by bodhi.

4 months ago

This update's test gating status has been changed to 'failed'.

4 months ago

This update's test gating status has been changed to 'passed'.

4 months ago

This update has been pushed to testing.

4 months ago

bojan provided feedback 4 months ago

karma

besser82 commented & provided feedback 4 months ago

karma

Works great! LGTM! =)

This update can be pushed to stable now if the maintainer wishes

4 months ago

geraldosimiao provided feedback 4 months ago

karma

This update has been submitted for stable by bodhi.

4 months ago

FEDORA-2025-66fb3fa6b0 ejected from the push because "Cannot find relevant tag for bind-9.18.41-1.fc43. None of ['f43-updates', 'f43-updates-pending', 'f43-build-side-121454'] are in ['epel9-next-testing', 'f44-updates-testing', 'eln-updates-testing', 'epel8-testing', 'epel9-testing', 'f44-flatpak-updates-testing', 'epel10.2-testing', 'epel10.0-testing', 'f42-flatpak-updates-testing', 'f42-updates-testing', 'epel10.1-testing', 'f43-flatpak-updates-testing', 'f43-container-updates-testing', 'f43-updates-testing', 'f41-updates-testing', 'f41-flatpak-updates-testing']."

4 months ago

psklenar commented & provided feedback 4 months ago

karma

automation test tier1 , all waived

This update has been submitted for stable by bodhi.

4 months ago

FEDORA-2025-66fb3fa6b0 ejected from the push because "Cannot find relevant tag for bind-dyndb-ldap-11.11-8.fc43. None of ['f43-updates', 'f43-updates-pending', 'f43-build-side-121454'] are in ['epel9-next-testing', 'f44-updates-testing', 'eln-updates-testing', 'epel8-testing', 'epel9-testing', 'f44-flatpak-updates-testing', 'epel10.2-testing', 'epel10.0-testing', 'f42-flatpak-updates-testing', 'f42-updates-testing', 'epel10.1-testing', 'f43-flatpak-updates-testing', 'f43-container-updates-testing', 'f43-updates-testing', 'f41-updates-testing', 'f41-flatpak-updates-testing']."

4 months ago

This update has been submitted for stable by pemensik.

4 months ago