OESA-2025-2759

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2759
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-2759.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-2759
Upstream
  • CVE-2025-40778
Published
2025-11-28T12:51:28Z
Modified
2025-11-28T13:17:43.372577Z
Summary
bind security update
Details

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4 / bind

Package

Name
bind
Purl
pkg:rpm/openEuler/bind&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.11.21-22.oe2003sp4

Ecosystem specific 

{
    "src": [
        "bind-9.11.21-22.oe2003sp4.src.rpm"
    ],
    "aarch64": [
        "bind-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-chroot-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-debuginfo-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-debugsource-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-devel-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-export-devel-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-export-libs-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-libs-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-libs-lite-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-pkcs11-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-pkcs11-devel-9.11.21-22.oe2003sp4.aarch64.rpm",
        "bind-utils-9.11.21-22.oe2003sp4.aarch64.rpm"
    ],
    "noarch": [
        "python3-bind-9.11.21-22.oe2003sp4.noarch.rpm"
    ],
    "x86_64": [
        "bind-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-chroot-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-debuginfo-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-debugsource-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-devel-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-export-devel-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-export-libs-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-libs-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-libs-lite-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-pkcs11-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-pkcs11-devel-9.11.21-22.oe2003sp4.x86_64.rpm",
        "bind-utils-9.11.21-22.oe2003sp4.x86_64.rpm"
    ]
}