Red Hat Security AdvisoryRHSA-2025:19835
bind security update
Released 2025-11-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) bind-32:9.11.36-16.el8_10.6, bind-chroot-32:9.11.36-16.el8_10.6, bind-devel-32:9.11.36-16.el8_10.6 +12
- Red Hat Enterprise Linux BaseOS (v. 8) bind-32:9.11.36-16.el8_10.6, bind-export-devel-32:9.11.36-16.el8_10.6, bind-export-libs-32:9.11.36-16.el8_10.6
Fixes 1 record
Priority HIGH 76
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00667 · Published 2025-10-22 · Fixed CWE-349
