Red Hat Security Advisory

RHSA-2025:21740

bind security update

Released 2025-11-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) bind-32:9.11.26-4.el8_4.8, bind-chroot-32:9.11.26-4.el8_4.8, bind-devel-32:9.11.26-4.el8_4.8 +12
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) bind-32:9.11.26-4.el8_4.8, bind-chroot-32:9.11.26-4.el8_4.8, bind-devel-32:9.11.26-4.el8_4.8 +12
Red Hat Enterprise Linux BaseOS AUS (v.8.4) bind-32:9.11.26-4.el8_4.8, bind-export-devel-32:9.11.26-4.el8_4.8, bind-export-libs-32:9.11.26-4.el8_4.8
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bind-32:9.11.26-4.el8_4.8, bind-export-devel-32:9.11.26-4.el8_4.8, bind-export-libs-32:9.11.26-4.el8_4.8

Fixes 2 records

TI-2025-27240 CVE-2025-40778 · GHSA-xmqp-6cj2-2hh3

Cache poisoning attacks with unsolicited RRs

HIGH 76

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00667 Published 2025-10-22 Fixed CWE-349

TI-2021-07480 CVE-2021-25220 · GHSA-v8rf-mvwx-cx29

DNS forwarders - cache poisoning vulnerability

LOW 36

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.0345 Published 2022-03-23 Fixed CWE-444