Linuxsecurity
Fedora 43 and 42 Address Critical DNSSEC Vulnerability in BIND
First seen 2 Dec 2025, 18:33 UTC
•
•5.8
Export
Article Content
Browse articles
Fedora has released security updates for BIND (Berkeley Internet Name Domain) version 9.21.14 to address a critical vulnerability (CVE-2025-8677) affecting DNSSEC validation. This vulnerability allows DNSSEC validation to fail if a matching but invalid DNSKEY is found, potentially leading to various spoofing attacks. Users of Fedora 42 and 43 are advised to apply these updates to mitigate the risk.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.