Skip to content

Commit b6662b8

Browse files
CBL-Mariner-BotKanishk Bansal
andauthored
[AUTOPATCHER-CORE] Upgrade bind to 9.20.18 for CVE-2025-13878 (#15554)
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
1 parent dd62567 commit b6662b8

4 files changed

Lines changed: 11 additions & 8 deletions

File tree

SPECS/bind/bind.signatures.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,6 @@
1414
"named.rwtab": "6a4c84b6709211d09f2d71491d4c66d1d4c0115a9db247a5ed2a9db10e575735",
1515
"named.sysconfig": "8f8eff846667b7811358e289e9fe594de17d0e47f2b8cebf7840ad8db7f34816",
1616
"setup-named-chroot.sh": "786fbc88c7929fadf217cf2286f2eb03b6fba14843e5da40ad43c0022dd71c3a",
17-
"bind-9.20.15.tar.xz": "d62b38fae48ba83fca6181112d0c71018d8b0f2ce285dc79dc6a0367722ccabb"
17+
"bind-9.20.18.tar.xz": "dfc546c990ac4515529cd45c4dd995862b18ae8a2d0cb29208e8896a5d325331"
1818
}
1919
}

SPECS/bind/bind.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99

1010
Summary: Domain Name System software
1111
Name: bind
12-
Version: 9.20.15
12+
Version: 9.20.18
1313
Release: 1%{?dist}
1414
License: ISC
1515
Vendor: Microsoft Corporation
@@ -536,6 +536,9 @@ fi;
536536
%{_mandir}/man1/named-nzd2nzf.1*
537537

538538
%changelog
539+
* Wed Jan 21 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 9.20.18-1
540+
- Auto-upgrade to 9.20.18 - for CVE-2025-13878
541+
539542
* Fri Oct 24 2025 Kanishk Bansal <kanbansal@microsoft.com> - 9.20.15-1
540543
- Auto-upgrade to 9.20.15 - for CVE-2025-40778, CVE-2025-8677, CVE-2025-40780
541544

SPECS/bind/nongit-fix.patch

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,18 @@
1-
From 701de7b23826b983ba5ad674ca85e1ab607b79f6 Mon Sep 17 00:00:00 2001
1+
From 440bfb303f5c0f5824dc744bb6cf41bc87899609 Mon Sep 17 00:00:00 2001
22
From: Kanishk Bansal <kanbansal@microsoft.com>
3-
Date: Fri, 24 Oct 2025 13:43:37 +0000
3+
Date: Wed, 21 Jan 2026 21:40:19 +0000
44
Subject: [PATCH] nongit-fix.patch
55

66
---
77
configure.ac | 6 ++++--
88
1 file changed, 4 insertions(+), 2 deletions(-)
99

1010
diff --git a/configure.ac b/configure.ac
11-
index a79b9d6..514587d 100644
11+
index 057ae04..35102b8 100644
1212
--- a/configure.ac
1313
+++ b/configure.ac
1414
@@ -19,7 +19,7 @@ m4_define([bind_VERSION_MINOR], 20)dnl
15-
m4_define([bind_VERSION_PATCH], 15)dnl
15+
m4_define([bind_VERSION_PATCH], 18)dnl
1616
m4_define([bind_VERSION_EXTRA], )dnl
1717
m4_define([bind_DESCRIPTION], [(Stable Release)])dnl
1818
-m4_define([bind_SRCID], [m4_esyscmd_s([git rev-parse --short HEAD | cut -b1-7])])dnl

cgmanifest.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1107,8 +1107,8 @@
11071107
"type": "other",
11081108
"other": {
11091109
"name": "bind",
1110-
"version": "9.20.15",
1111-
"downloadUrl": "https://ftp.isc.org/isc/bind9/9.20.15/bind-9.20.15.tar.xz"
1110+
"version": "9.20.18",
1111+
"downloadUrl": "https://ftp.isc.org/isc/bind9/9.20.18/bind-9.20.18.tar.xz"
11121112
}
11131113
}
11141114
},

0 commit comments

Comments
 (0)