SUSE-SU-2025:4108-1

Опубликовано: 14 нояб. 2025

Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).

Список пакетов

Image SLES15-SP5-Azure-3P

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Azure-Basic

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Azure-Standard

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-BYOS-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-BYOS-EC2

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-BYOS-GCE

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-CHOST-BYOS-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-CHOST-BYOS-EC2

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-CHOST-BYOS-GCE

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-CHOST-BYOS-GDC

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-EC2

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-GCE

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-HPC-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-HPC-BYOS-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-HPC-BYOS-EC2

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-HPC-BYOS-GCE

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Hardened-BYOS-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Hardened-BYOS-EC2

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Hardened-BYOS-GCE

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Micro-5-5

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Micro-5-5-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Micro-5-5-BYOS

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Micro-5-5-EC2

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-Azure-3P

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-BYOS-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-BYOS-EC2

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-BYOS-GCE

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-Hardened-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAP-Hardened-GCE

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAPCAL-Azure

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAPCAL-EC2

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-SAPCAL-GCE

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

bind-9.16.50-150500.8.32.1

bind-doc-9.16.50-150500.8.32.1

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

bind-9.16.50-150500.8.32.1

bind-doc-9.16.50-150500.8.32.1

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

SUSE Linux Enterprise Micro 5.5

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

SUSE Linux Enterprise Server 15 SP5-LTSS

bind-9.16.50-150500.8.32.1

bind-doc-9.16.50-150500.8.32.1

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

bind-9.16.50-150500.8.32.1

bind-doc-9.16.50-150500.8.32.1

bind-utils-9.16.50-150500.8.32.1

python3-bind-9.16.50-150500.8.32.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20254108-1/
Link for SUSE-SU-2025:4108-1
https://lists.suse.com/pipermail/sle-security-updates/2025-November/023289.html
E-Mail link for SUSE-SU-2025:4108-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1252379
SUSE Bug 1252379
https://bugzilla.suse.com/1252380
SUSE Bug 1252380
https://www.suse.com/security/cve/CVE-2025-40778/
SUSE CVE CVE-2025-40778 page
https://www.suse.com/security/cve/CVE-2025-40780/
SUSE CVE CVE-2025-40780 page

Описание

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Затронутые продукты

Image SLES15-SP5-Azure-3P:bind-utils-9.16.50-150500.8.32.1

Image SLES15-SP5-Azure-3P:python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Azure-Basic:bind-utils-9.16.50-150500.8.32.1

Image SLES15-SP5-Azure-Basic:python3-bind-9.16.50-150500.8.32.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-40778.html
CVE-2025-40778
https://bugzilla.suse.com/1252379
SUSE Bug 1252379

Описание

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Затронутые продукты

Image SLES15-SP5-Azure-3P:bind-utils-9.16.50-150500.8.32.1

Image SLES15-SP5-Azure-3P:python3-bind-9.16.50-150500.8.32.1

Image SLES15-SP5-Azure-Basic:bind-utils-9.16.50-150500.8.32.1

Image SLES15-SP5-Azure-Basic:python3-bind-9.16.50-150500.8.32.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-40780.html
CVE-2025-40780
https://bugzilla.suse.com/1252380
SUSE Bug 1252380

SUSE-SU-2025:4108-1

Описание

Список пакетов

Image SLES15-SP5-Azure-3P

Image SLES15-SP5-Azure-Basic

Image SLES15-SP5-Azure-Standard

Image SLES15-SP5-BYOS-Azure

Image SLES15-SP5-BYOS-EC2

Image SLES15-SP5-BYOS-GCE

Image SLES15-SP5-CHOST-BYOS-Aliyun

Image SLES15-SP5-CHOST-BYOS-Azure

Image SLES15-SP5-CHOST-BYOS-EC2

Image SLES15-SP5-CHOST-BYOS-GCE

Image SLES15-SP5-CHOST-BYOS-GDC

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

Image SLES15-SP5-EC2

Image SLES15-SP5-GCE

Image SLES15-SP5-HPC-Azure

Image SLES15-SP5-HPC-BYOS-Azure

Image SLES15-SP5-HPC-BYOS-EC2

Image SLES15-SP5-HPC-BYOS-GCE

Image SLES15-SP5-Hardened-BYOS-Azure

Image SLES15-SP5-Hardened-BYOS-EC2

Image SLES15-SP5-Hardened-BYOS-GCE

Image SLES15-SP5-Micro-5-5

Image SLES15-SP5-Micro-5-5-Azure

Image SLES15-SP5-Micro-5-5-BYOS

Image SLES15-SP5-Micro-5-5-BYOS-Azure

Image SLES15-SP5-Micro-5-5-EC2

Image SLES15-SP5-SAP-Azure-3P

Image SLES15-SP5-SAP-Azure-LI-BYOS

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

Image SLES15-SP5-SAP-Azure-VLI-BYOS

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP5-SAP-BYOS-Azure

Image SLES15-SP5-SAP-BYOS-EC2

Image SLES15-SP5-SAP-BYOS-GCE

Image SLES15-SP5-SAP-Hardened-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

Image SLES15-SP5-SAP-Hardened-GCE

Image SLES15-SP5-SAPCAL-Azure

Image SLES15-SP5-SAPCAL-EC2

Image SLES15-SP5-SAPCAL-GCE

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP5

Ссылки

Уязвимость: CVE-2025-40778

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-40780

Описание

Затронутые продукты

Ссылки