SUSE-SU-2025:4107-1

Опубликовано: 14 нояб. 2025

Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).

Список пакетов

Image SLES15-SP4-BYOS

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-BYOS-Azure

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-BYOS-EC2

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-BYOS-GCE

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-CHOST-BYOS

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-CHOST-BYOS-Azure

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-CHOST-BYOS-EC2

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-CHOST-BYOS-GCE

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-HPC-BYOS

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-HPC-BYOS-Azure

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-HPC-BYOS-EC2

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-HPC-BYOS-GCE

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-HPC-EC2

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-HPC-GCE

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-Hardened-BYOS

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-Hardened-BYOS-Azure

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-Hardened-BYOS-EC2

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-Hardened-BYOS-GCE

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Azure

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-BYOS

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-BYOS-Azure

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-BYOS-EC2

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-BYOS-GCE

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-EC2

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-GCE

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Hardened

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Hardened-Azure

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Hardened-BYOS

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAP-Hardened-GCE

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAPCAL

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAPCAL-Azure

bind-utils-9.16.50-150400.5.56.1

python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-SAPCAL-EC2

bind-utils-9.16.50-150400.5.56.1

https://www.suse.com/support/update/announcement/2025/suse-su-20254107-1/
Link for SUSE-SU-2025:4107-1
https://lists.suse.com/pipermail/sle-security-updates/2025-November/023290.html
E-Mail link for SUSE-SU-2025:4107-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1252379
SUSE Bug 1252379
https://bugzilla.suse.com/1252380
SUSE Bug 1252380
https://www.suse.com/security/cve/CVE-2025-40778/
SUSE CVE CVE-2025-40778 page
https://www.suse.com/security/cve/CVE-2025-40780/
SUSE CVE CVE-2025-40780 page

Описание

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:bind-utils-9.16.50-150400.5.56.1

Image SLES15-SP4-BYOS-Azure:python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-BYOS-EC2:bind-utils-9.16.50-150400.5.56.1

Image SLES15-SP4-BYOS-EC2:python3-bind-9.16.50-150400.5.56.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-40778.html
CVE-2025-40778
https://bugzilla.suse.com/1252379
SUSE Bug 1252379

Описание

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:bind-utils-9.16.50-150400.5.56.1

Image SLES15-SP4-BYOS-Azure:python3-bind-9.16.50-150400.5.56.1

Image SLES15-SP4-BYOS-EC2:bind-utils-9.16.50-150400.5.56.1

Image SLES15-SP4-BYOS-EC2:python3-bind-9.16.50-150400.5.56.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-40780.html
CVE-2025-40780
https://bugzilla.suse.com/1252380
SUSE Bug 1252380

SUSE-SU-2025:4107-1

Описание

Список пакетов

Image SLES15-SP4-BYOS

Image SLES15-SP4-BYOS-Azure

Image SLES15-SP4-BYOS-EC2

Image SLES15-SP4-BYOS-GCE

Image SLES15-SP4-CHOST-BYOS

Image SLES15-SP4-CHOST-BYOS-Aliyun

Image SLES15-SP4-CHOST-BYOS-Azure

Image SLES15-SP4-CHOST-BYOS-EC2

Image SLES15-SP4-CHOST-BYOS-GCE

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

Image SLES15-SP4-HPC-BYOS

Image SLES15-SP4-HPC-BYOS-Azure

Image SLES15-SP4-HPC-BYOS-EC2

Image SLES15-SP4-HPC-BYOS-GCE

Image SLES15-SP4-HPC-EC2

Image SLES15-SP4-HPC-GCE

Image SLES15-SP4-Hardened-BYOS

Image SLES15-SP4-Hardened-BYOS-Azure

Image SLES15-SP4-Hardened-BYOS-EC2

Image SLES15-SP4-Hardened-BYOS-GCE

Image SLES15-SP4-Manager-Server-4-3-BYOS

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

Image SLES15-SP4-SAP

Image SLES15-SP4-SAP-Azure

Image SLES15-SP4-SAP-Azure-LI-BYOS

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

Image SLES15-SP4-SAP-Azure-VLI-BYOS

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-EC2

Image SLES15-SP4-SAP-GCE

Image SLES15-SP4-SAP-Hardened

Image SLES15-SP4-SAP-Hardened-Azure

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-GCE

Image SLES15-SP4-SAPCAL

Image SLES15-SP4-SAPCAL-Azure

Image SLES15-SP4-SAPCAL-EC2

Image SLES15-SP4-SAPCAL-GCE

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Manager Proxy LTS 4.3

SUSE Manager Server LTS 4.3

Ссылки

Уязвимость: CVE-2025-40778

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-40780

Описание

Затронутые продукты

Ссылки