Red Hat Security AdvisoryRHSA-2025:21735
bind security update
Released 2025-11-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) bind-32:9.11.36-8.el8_8.8, bind-libs-32:9.11.36-8.el8_8.8, bind-libs-lite-32:9.11.36-8.el8_8.8 +5
- Red Hat Enterprise Linux AppStream TUS (v.8.8) bind-32:9.11.36-8.el8_8.8, bind-libs-32:9.11.36-8.el8_8.8, bind-libs-lite-32:9.11.36-8.el8_8.8 +5
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) bind-32:9.11.36-8.el8_8.8, bind-export-libs-32:9.11.36-8.el8_8.8
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) bind-32:9.11.36-8.el8_8.8, bind-export-libs-32:9.11.36-8.el8_8.8
Fixes 1 record
Priority HIGH 76
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00667 · Published 2025-10-22 · Fixed CWE-349
