{ "summary": { "snap": { "added": [], "removed": [], "diff": [] }, "deb": { "added": [], "removed": [], "diff": [ "bind9-dnsutils", "bind9-host", "bind9-libs:ppc64el" ] } }, "diff": { "deb": [ { "name": "bind9-dnsutils", "from_version": { "source_package_name": "bind9", "source_package_version": "1:9.20.11-0ubuntu0.1", "version": "1:9.20.11-0ubuntu0.1" }, "to_version": { "source_package_name": "bind9", "source_package_version": "1:9.20.11-0ubuntu0.2", "version": "1:9.20.11-0ubuntu0.2" }, "cves": [ { "cve": "CVE-2025-8677", "url": "https://ubuntu.com/security/CVE-2025-8677", "cve_description": "Resource exhaustion via malformed DNSKEY handling", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40778", "url": "https://ubuntu.com/security/CVE-2025-40778", "cve_description": "Cache poisoning attacks with unsolicited RRs", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40780", "url": "https://ubuntu.com/security/CVE-2025-40780", "cve_description": "Cache poisoning due to weak PRNG", "cve_priority": "medium", "cve_public_date": "2025-10-22" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2025-8677", "url": "https://ubuntu.com/security/CVE-2025-8677", "cve_description": "Resource exhaustion via malformed DNSKEY handling", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40778", "url": "https://ubuntu.com/security/CVE-2025-40778", "cve_description": "Cache poisoning attacks with unsolicited RRs", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40780", "url": "https://ubuntu.com/security/CVE-2025-40780", "cve_description": "Cache poisoning due to weak PRNG", "cve_priority": "medium", "cve_public_date": "2025-10-22" } ], "log": [ "", " * SECURITY UPDATE: Resource exhaustion via malformed DNSKEY handling", " - debian/patches/CVE-2025-8677.patch: count invalid keys as validation", " failures in lib/dns/validator.c.", " - CVE-2025-8677", " * SECURITY UPDATE: Cache poisoning attacks with unsolicited RRs", " - debian/patches/CVE-2025-40778.patch: no longer accept DNAME records", " or extraneous NS records in the AUTHORITY section unless these are", " received via spoofing-resistant transport in doc/arm/reference.rst,", " lib/dns/include/dns/message.h, lib/dns/message.c, lib/dns/resolver.c.", " - CVE-2025-40778", " * SECURITY UPDATE: Cache poisoning due to weak PRNG", " - debian/patches/CVE-2025-40780.patch: change internal random generator", " to a cryptographically secure pseudo-random generator in", " configure.ac, lib/isc/Makefile.am, lib/isc/hash.c, lib/isc/hashmap.c,", " lib/isc/include/isc/nonce.h, lib/isc/include/isc/random.h,", " lib/isc/random.c, tests/isc/random_test.c.", " - CVE-2025-40780", "" ], "package": "bind9", "version": "1:9.20.11-0ubuntu0.2", "urgency": "medium", "distributions": "plucky-security", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Tue, 21 Oct 2025 08:32:47 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "bind9-host", "from_version": { "source_package_name": "bind9", "source_package_version": "1:9.20.11-0ubuntu0.1", "version": "1:9.20.11-0ubuntu0.1" }, "to_version": { "source_package_name": "bind9", "source_package_version": "1:9.20.11-0ubuntu0.2", "version": "1:9.20.11-0ubuntu0.2" }, "cves": [ { "cve": "CVE-2025-8677", "url": "https://ubuntu.com/security/CVE-2025-8677", "cve_description": "Resource exhaustion via malformed DNSKEY handling", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40778", "url": "https://ubuntu.com/security/CVE-2025-40778", "cve_description": "Cache poisoning attacks with unsolicited RRs", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40780", "url": "https://ubuntu.com/security/CVE-2025-40780", "cve_description": "Cache poisoning due to weak PRNG", "cve_priority": "medium", "cve_public_date": "2025-10-22" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2025-8677", "url": "https://ubuntu.com/security/CVE-2025-8677", "cve_description": "Resource exhaustion via malformed DNSKEY handling", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40778", "url": "https://ubuntu.com/security/CVE-2025-40778", "cve_description": "Cache poisoning attacks with unsolicited RRs", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40780", "url": "https://ubuntu.com/security/CVE-2025-40780", "cve_description": "Cache poisoning due to weak PRNG", "cve_priority": "medium", "cve_public_date": "2025-10-22" } ], "log": [ "", " * SECURITY UPDATE: Resource exhaustion via malformed DNSKEY handling", " - debian/patches/CVE-2025-8677.patch: count invalid keys as validation", " failures in lib/dns/validator.c.", " - CVE-2025-8677", " * SECURITY UPDATE: Cache poisoning attacks with unsolicited RRs", " - debian/patches/CVE-2025-40778.patch: no longer accept DNAME records", " or extraneous NS records in the AUTHORITY section unless these are", " received via spoofing-resistant transport in doc/arm/reference.rst,", " lib/dns/include/dns/message.h, lib/dns/message.c, lib/dns/resolver.c.", " - CVE-2025-40778", " * SECURITY UPDATE: Cache poisoning due to weak PRNG", " - debian/patches/CVE-2025-40780.patch: change internal random generator", " to a cryptographically secure pseudo-random generator in", " configure.ac, lib/isc/Makefile.am, lib/isc/hash.c, lib/isc/hashmap.c,", " lib/isc/include/isc/nonce.h, lib/isc/include/isc/random.h,", " lib/isc/random.c, tests/isc/random_test.c.", " - CVE-2025-40780", "" ], "package": "bind9", "version": "1:9.20.11-0ubuntu0.2", "urgency": "medium", "distributions": "plucky-security", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Tue, 21 Oct 2025 08:32:47 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "bind9-libs:ppc64el", "from_version": { "source_package_name": "bind9", "source_package_version": "1:9.20.11-0ubuntu0.1", "version": "1:9.20.11-0ubuntu0.1" }, "to_version": { "source_package_name": "bind9", "source_package_version": "1:9.20.11-0ubuntu0.2", "version": "1:9.20.11-0ubuntu0.2" }, "cves": [ { "cve": "CVE-2025-8677", "url": "https://ubuntu.com/security/CVE-2025-8677", "cve_description": "Resource exhaustion via malformed DNSKEY handling", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40778", "url": "https://ubuntu.com/security/CVE-2025-40778", "cve_description": "Cache poisoning attacks with unsolicited RRs", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40780", "url": "https://ubuntu.com/security/CVE-2025-40780", "cve_description": "Cache poisoning due to weak PRNG", "cve_priority": "medium", "cve_public_date": "2025-10-22" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2025-8677", "url": "https://ubuntu.com/security/CVE-2025-8677", "cve_description": "Resource exhaustion via malformed DNSKEY handling", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40778", "url": "https://ubuntu.com/security/CVE-2025-40778", "cve_description": "Cache poisoning attacks with unsolicited RRs", "cve_priority": "medium", "cve_public_date": "2025-10-22" }, { "cve": "CVE-2025-40780", "url": "https://ubuntu.com/security/CVE-2025-40780", "cve_description": "Cache poisoning due to weak PRNG", "cve_priority": "medium", "cve_public_date": "2025-10-22" } ], "log": [ "", " * SECURITY UPDATE: Resource exhaustion via malformed DNSKEY handling", " - debian/patches/CVE-2025-8677.patch: count invalid keys as validation", " failures in lib/dns/validator.c.", " - CVE-2025-8677", " * SECURITY UPDATE: Cache poisoning attacks with unsolicited RRs", " - debian/patches/CVE-2025-40778.patch: no longer accept DNAME records", " or extraneous NS records in the AUTHORITY section unless these are", " received via spoofing-resistant transport in doc/arm/reference.rst,", " lib/dns/include/dns/message.h, lib/dns/message.c, lib/dns/resolver.c.", " - CVE-2025-40778", " * SECURITY UPDATE: Cache poisoning due to weak PRNG", " - debian/patches/CVE-2025-40780.patch: change internal random generator", " to a cryptographically secure pseudo-random generator in", " configure.ac, lib/isc/Makefile.am, lib/isc/hash.c, lib/isc/hashmap.c,", " lib/isc/include/isc/nonce.h, lib/isc/include/isc/random.h,", " lib/isc/random.c, tests/isc/random_test.c.", " - CVE-2025-40780", "" ], "package": "bind9", "version": "1:9.20.11-0ubuntu0.2", "urgency": "medium", "distributions": "plucky-security", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Tue, 21 Oct 2025 08:32:47 -0400" } ], "notes": null, "is_version_downgrade": false } ], "snap": [] }, "added": { "deb": [], "snap": [] }, "removed": { "deb": [], "snap": [] }, "notes": "Changelog diff for Ubuntu 25.04 plucky image from release image serial 20251021 to 20251024", "from_series": "plucky", "to_series": "plucky", "from_serial": "20251021", "to_serial": "20251024", "from_manifest_filename": "release_manifest.previous", "to_manifest_filename": "manifest.current" }