UnratedFix available
bind: Fix of CVE-2025-40778
Type: advisorySources: OSV
- CVE-2025-40778: Tighten restrictions on caching NS RRsets in the authority section (require the NS owner name to be an ancestor of the queried name) to prevent cache poisoning via spoofed records
- Products
- bind, bind-chroot, bind-devel, bind-libs, bind-sdb, bind-utils
- Affected versions
- Not specified
- Fixed versions
- 33:9.8.2-0.68.rc1.el6.11.tuxcare.els12
- CVEs
- CVE-2025-40778
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 10:58 UTC · Revision 1
Source evidence
- CVE-2025-40778: Tighten restrictions on caching NS RRsets in the authority section (require the NS owner name to be an ancestor of the queried name) to prevent cache poisoning via spoofed records
osv:CLSA-2026-1781169600
bind
Fixed versions: 33:9.8.2-0.68.rc1.el6.11.tuxcare.els12
bind-chroot
Fixed versions: 33:9.8.2-0.68.rc1.el6.11.tuxcare.els12
bind-devel
Fixed versions: 33:9.8.2-0.68.rc1.el6.11.tuxcare.els12
bind-libs
Fixed versions: 33:9.8.2-0.68.rc1.el6.11.tuxcare.els12
bind-sdb
Fixed versions: 33:9.8.2-0.68.rc1.el6.11.tuxcare.els12
bind-utils
Fixed versions: 33:9.8.2-0.68.rc1.el6.11.tuxcare.els12
Complete source record
{
"id": "528ee14423637b80eefb85937173a87edfdae7a8bbdd8c8f992c608d9a11d0ec",
"url": "https://osv.dev/vulnerability/CLSA-2026-1781169600",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "bind: Fix of CVE-2025-40778",
"summary": "- CVE-2025-40778: Tighten restrictions on caching NS RRsets in the authority section (require the NS owner name to be an ancestor of the queried name) to prevent cache poisoning via spoofed records",
"evidence": "osv:CLSA-2026-1781169600",
"products": [
{
"name": {
"value": "bind",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind-chroot",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind-devel",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind-libs",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind-sdb",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind-utils",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1781169600",
"aliases": [
"CLSA-2026-1781169600"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:rpm/tuxcare/bind?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1781169600.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12"
}
]
}
],
"package": {
"name": "bind-chroot",
"purl": "pkg:rpm/tuxcare/bind-chroot?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1781169600.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12"
}
]
}
],
"package": {
"name": "bind-devel",
"purl": "pkg:rpm/tuxcare/bind-devel?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1781169600.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12"
}
]
}
],
"package": {
"name": "bind-libs",
"purl": "pkg:rpm/tuxcare/bind-libs?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1781169600.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12"
}
]
}
],
"package": {
"name": "bind-sdb",
"purl": "pkg:rpm/tuxcare/bind-sdb?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1781169600.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "33:9.8.2-0.68.rc1.el6.11.tuxcare.els12"
}
]
}
],
"package": {
"name": "bind-utils",
"purl": "pkg:rpm/tuxcare/bind-utils?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1781169600.json"
}
}
],
"modified": "2026-10-26T09:31:39.306548557Z",
"provider": "osv",
"upstream": [
"CVE-2025-40778"
],
"references": [
"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1781169600.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-40778"
]
},
"related_cves": [
{
"value": "CVE-2025-40778",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 447985,
"published_at": "2026-06-11T20:00:26+00:00"
}