Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE: bind Important Security Update for Cache Poisoning 2026:20085-1

suse
Calendar Grey January 20, 2026
Dist Suse Esm H88
Find detailed information about a SUSE security advisory for bind addressing multiple critical issues regarding cache management.
An update that solves three vulnerabilities and has one fix can now be installed.

Summary

## This update for bind fixes the following issues: * Upgrade to release 9.20.15 Security Fixes: * CVE-2025-40778: Fixed cache poisoning attacks with unsolicited RRs (bsc#1252379) * CVE-2025-40780: Fixed cache poisoning due to weak PRNG (bsc#1252380) * CVE-2025-8677: Fixed resource exhaustion via malformed DNSKEY handling (bsc#1252378) New Features: * Add dnssec-policy keys configuration check to named-checkconf. * Add a new option `manual-mode` to dnssec-policy. * Add a new option `servfail- until-ready` to response-policy zones. * Support for parsing HHIT and BRID records has been added. * Support for parsing DSYNC records has been added. Removed Features: * Deprecate the `tkey-gssapi-credential` statement. * Obsolete the `tkey-domain` statement.

Topics%20covered

Topics Covered

security advisory SuSE bind important cache poisoning DNS

References

* bsc#1230649

* bsc#1252378

* bsc#1252379

* bsc#1252380

Cross-

* CVE-2025-40778

* CVE-2025-40780

* CVE-2025-8677

CVSS scores:

* CVE-2025-40778 ( SUSE ): 9.2

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N

* CVE-2025-40778 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

* CVE-2025-40778 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

* CVE-2025-40780 ( SUSE ): 9.2

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N

* CVE-2025-40780 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

* CVE-2025-40780 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

* CVE-2025-8677 ( SUSE ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:20085-1
Release Date: 2026-01-15T10:43:49Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE bind important cache poisoning DNS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here