stable

bind9-next-9.21.14-2.fc42

FEDORA-2025-d9f9394ecd created by pemensik 11 months ago for Fedora 42

Update to 9.21.14 (#2394406)

Security Fixes:

  • DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677)
  • Address various spoofing attacks. (CVE-2025-40778)
  • Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

New Features:

  • Add dnssec-policy keys configuration check to named-checkconf.
  • Add support for synthetic records.
  • Support for zone-specific plugins.
  • Support for additional tokens in the zone file name template.

Removed Features:

  • Remove randomized RRset ordering.

and bug fixes

https://downloads.isc.org/isc/bind9/9.21.14/doc/arm/html/notes.html#notes-for-bind-9-21-14

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-d9f9394ecd

This update has been submitted for testing by pemensik.

11 months ago

This update's test gating status has been changed to 'ignored'.

11 months ago

pemensik edited this update.

11 months ago

pemensik edited this update.

11 months ago

pemensik edited this update.

11 months ago

pemensik edited this update.

11 months ago

This update has been pushed to testing.

11 months ago

This update has been submitted for stable by bodhi.

11 months ago

This update has been pushed to stable.

11 months ago

Please log in to add feedback.

Metadata
Type
security
Severity
high
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
11 months ago
in testing
11 months ago
in stable
11 months ago
modified
11 months ago
approved
11 months ago
BZ#2394406 bind9-next-9.21.14 is available
0
0
BZ#2396295 named-chroot fails to start: isc_dir_chroot: not implemented
0
0
BZ#2406399 CVE-2025-40778 [Severity: High] bind9: Cache poisoning attacks with unsolicited RRs
0
0
BZ#2413104 Regression with disabled algorithms after CVE-2025-8677 fixes
0
0

Automated Test Results