Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package bind for openSUSE:Factory checked in at 2025-10-23 18:31:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/bind (Old) and /work/SRC/openSUSE:Factory/.bind.new.1980 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "bind" Thu Oct 23 18:31:35 2025 rev:224 rq:1313051 version:9.20.15 Changes: -------- --- /work/SRC/openSUSE:Factory/bind/bind.changes 2025-09-12 21:09:06.326152850 +0200 +++ /work/SRC/openSUSE:Factory/.bind.new.1980/bind.changes 2025-10-23 18:31:40.395647096 +0200 @@ -1,0 +2,21 @@ +Wed Oct 22 14:14:38 UTC 2025 - Jorik Cronenberg <[email protected]> + +- Upgrade to release 9.20.15 + Security Fixes: + * DNSSEC validation fails if matching but invalid DNSKEY is found. + [CVE-2025-8677, bsc#1252378] + * Address various spoofing attacks. + [CVE-2025-40778, bsc#1252379] + * Cache-poisoning due to weak pseudo-random number generator. + [CVE-2025-40780, bsc#1252380] + + New Features: + * Add dnssec-policy keys configuration check to named-checkconf. + + Bug Fixes: + * Missing DNSSEC information when CD bit is set in query. + * rndc sign during ZSK rollover will now replace signatures. + * Use signer name when disabling DNSSEC algorithms. + * Preserve cache when reload fails and reload the server again. + +------------------------------------------------------------------- Old: ---- bind-9.20.13.tar.xz bind-9.20.13.tar.xz.asc New: ---- bind-9.20.15.tar.xz bind-9.20.15.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bind.spec ++++++ --- /var/tmp/diff_new_pack.5WqmN7/_old 2025-10-23 18:31:41.399690020 +0200 +++ /var/tmp/diff_new_pack.5WqmN7/_new 2025-10-23 18:31:41.407690362 +0200 @@ -59,7 +59,7 @@ %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif Name: bind -Version: 9.20.13 +Version: 9.20.15 Release: 0 Summary: Domain Name System (DNS) Server (named) License: MPL-2.0 ++++++ bind-9.20.13.tar.xz -> bind-9.20.15.tar.xz ++++++ ++++ 6080 lines of diff (skipped)
