Alerts This Week
Warning Icon 1 1,109
Alerts This Week
Warning Icon 1 1,109

Fedora 42's bind9-next Critical Patch for DNS Security CVE-2025-13878

fedora
Calendar Grey January 31, 2026
Dist Fedora Esm H88
Update Fedora 42 bind9-next to fix critical security issues and improve DNS functionalities for enhanced performance.
Update to 9.21.17 (rhbz#2415843) Security Fixes: Fix incorrect length checks for BRID and HHIT records

Summary

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

Update Information:

Update to 9.21.17 (rhbz#2415843) Security Fixes: Fix incorrect length checks for BRID and HHIT records. (CVE-2025-13878) New Features: Add support for Extended DNS Error 9 (Missing DNSKEY). Add support for Extended DNS Error 13 (Cached Error). Add support for Generalized DNS Notifications. Features Changes: Add more information to the rndc recursing output about fetches. Enforce bounds of multiple configuration options. Bug Fixes: Fix inbound IXFR performance regression. Make DNSSEC key rollovers more robust. Fix a catalog zone issue, where member zones could fail to load. Fix slow speed when signing a large delegation zone with NSEC3 opt-out. Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to be invalid. Fix a possible catalog zone issue during reconfiguration. Fix the charts in the statistics channel. https://downloads.isc.org/isc/bind9/9.21.17/doc/arm/html/notes.html#notes-for- bind-9-21-17

Topics%20covered

Topics Covered

security advisory fedora critical bind security fix DNS

Change Log

* Thu Jan 22 2026 Petr Men\u0161k - 32:9.21.17-2 - Remove separate license subpackage * Thu Jan 22 2026 Petr Men\u0161k - 32:9.21.17-1 - Update to 9.21.17 (rhbz#2415843) * Thu Jan 22 2026 Petr Men\u0161k - 32:9.21.14-5 - Fix build for RHEL, disable JEMALLOC there * Thu Jan 22 2026 Petr Men\u0161k - 32:9.21.14-4 - Use dns-root-data package for hints source * Thu Jan 22 2026 Petr Men\u0161k - 32:9.21.14-3 - Fix running SYSTEMTEST during build

References


[ 1 ] Bug #2415843 - bind9-next-9.21.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=2415843

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d8979b7a9c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: bind9-next
Product: Fedora 42
Version: 9.21.17
Release: 2.fc42
URL: https://www.isc.org/bind/
Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server

Topics%20covered

Topics Covered

security advisory fedora critical bind security fix DNS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here