[ALSA-2026:55437] Important: bind security update
Type:
security
Severity:
important
Release date:
2026-08-18
Description:
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331) * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321) * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622) * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721) * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204) * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 bind-devel-9.18.33-15.el10_2.10.aarch64.rpm 1811de90ac1095651a0cb1b5999a2172d89214075e120af4889325251b4de475
aarch64 bind-dnssec-utils-9.18.33-15.el10_2.10.aarch64.rpm 66b4318adbf0fc787471d55409532cff0485e09adcf0b1892790f6fa114851c8
aarch64 bind-chroot-9.18.33-15.el10_2.10.aarch64.rpm 6fdac0fc0c986797863283705dcc31a7d91382a529db5f95e52f5ff9565c324c
aarch64 bind-utils-9.18.33-15.el10_2.10.aarch64.rpm cfc574740ee82a8fa55aef853cf6f3308448e93a6b911031e398e1e973b1c6f9
aarch64 bind-libs-9.18.33-15.el10_2.10.aarch64.rpm f00ae9f038455fb68f1a0fe62a6d066fcc55a64c4f6ee7478bf171022f7ddbdf
aarch64 bind-9.18.33-15.el10_2.10.aarch64.rpm f11cba18f5b3021f6d369270dcd3f677403c9d74381fa9664cfc2b29c0891986
noarch bind-doc-9.18.33-15.el10_2.10.noarch.rpm bef2f81f4c02f8446fe4280195a27721cd50f030c9396aa4d7f34ad45d7fc63c
noarch bind-license-9.18.33-15.el10_2.10.noarch.rpm e7269f3a04d0f19af0b01cb87ae997a2d63f8b901c3fbbbd06b2be1ac756d519
ppc64le bind-chroot-9.18.33-15.el10_2.10.ppc64le.rpm 426ace85823f85ae709bece9ae1dabd29196c7857512395c997561c17945b11d
ppc64le bind-devel-9.18.33-15.el10_2.10.ppc64le.rpm 6dacee1a91c2a83191886eb376982d870c2e97f7e6ff8201af06e4996f26eebd
ppc64le bind-9.18.33-15.el10_2.10.ppc64le.rpm 9bef3dc911d3d75734263a2a4918812e108907a55c8e35f27bf541a1b4a70ee7
ppc64le bind-dnssec-utils-9.18.33-15.el10_2.10.ppc64le.rpm 9d62496e11e44dfdcfbedcc3277968096927da94d8fea210245a24c66cc7f4f3
ppc64le bind-libs-9.18.33-15.el10_2.10.ppc64le.rpm c996ce71bde9aaeee1c4da9951aeda9bfebf4abd89f4d2067fe4b6e340789cd2
ppc64le bind-utils-9.18.33-15.el10_2.10.ppc64le.rpm fe5218b5cbfa62af746ee53cafb921f305103e412bdfe24890679665bf692fb6
s390x bind-9.18.33-15.el10_2.10.s390x.rpm 11eda84081a11a884e3998e348f027899f5f789eb6f159a827996901a96f8fc6
s390x bind-dnssec-utils-9.18.33-15.el10_2.10.s390x.rpm 2f7f4c25defdcc71e9e8d46a1087d15330150d9bd3a3f08ce2a000e35206f2d6
s390x bind-libs-9.18.33-15.el10_2.10.s390x.rpm 693a8a69dc9c8b7d36142c7d3db6df983435268f6cdc91875f7f5f4da81aa852
s390x bind-utils-9.18.33-15.el10_2.10.s390x.rpm 781a40bf6074e45a1fdcd9c296cd4d926129952ebccbdcfff31e8d3c4629c646
s390x bind-chroot-9.18.33-15.el10_2.10.s390x.rpm bfb04d07f852c38f1b53e2b3b3bda4ae02b865755c2ab00068baf5c9212bec01
s390x bind-devel-9.18.33-15.el10_2.10.s390x.rpm da76abd052e0e7c25a07ff174dbbb9a08ffb11d9aa35ded2129b50f23310576d
x86_64 bind-libs-9.18.33-15.el10_2.10.x86_64.rpm 0db9b2b68d79c6f45892c6fc54c4da330d648fce39b199791ad2fa1585c731d1
x86_64 bind-chroot-9.18.33-15.el10_2.10.x86_64.rpm 24c989eaafab7d8fe8b21cda04bb6522a06dc99816c8aefc946d0e09e068fb06
x86_64 bind-devel-9.18.33-15.el10_2.10.x86_64.rpm 479c31a3d966f6f48dac72b17715e49bc67e4d46685fbd11e81b51b1c4556bdd
x86_64 bind-dnssec-utils-9.18.33-15.el10_2.10.x86_64.rpm 6d6c61dc36eab38f3fdd1f9a94d08efc102e9317d0e180815b5fea4a2b36082d
x86_64 bind-9.18.33-15.el10_2.10.x86_64.rpm d9307112a0dfc7dd3b89d076480e489f39e6c7dcebc2701f285d3922b8356679
x86_64 bind-utils-9.18.33-15.el10_2.10.x86_64.rpm f5c9476545b6c321d5ebeebec1e7609910285fcd4d8e16b190c97a622565ea59
x86_64_v2 bind-9.18.33-15.el10_2.10.x86_64_v2.rpm 4a1d79869711ae51b9ae95c2e3d17b222f76915ed16121af31d47dd1de20e8f6
x86_64_v2 bind-dnssec-utils-9.18.33-15.el10_2.10.x86_64_v2.rpm 685abd266ec002e7fff8febe21204b66e7861beef11eaa14440cd17a239778e2
x86_64_v2 bind-chroot-9.18.33-15.el10_2.10.x86_64_v2.rpm 96865d990dd12f80d93bf63663a5612bab8a14a0cf1fdb976144c600322512c6
x86_64_v2 bind-utils-9.18.33-15.el10_2.10.x86_64_v2.rpm 9ecc585a8ac59230087d7fcc71647e0bb48be3cfe777bcd6c005471d84258973
x86_64_v2 bind-devel-9.18.33-15.el10_2.10.x86_64_v2.rpm d9d4825a7e3792aa8cc34c8cbd5fc6541eb4a9e6a7c9e9ab19407bb70045c2ca
x86_64_v2 bind-libs-9.18.33-15.el10_2.10.x86_64_v2.rpm e000fd62c4e1ec48610291e2b6c4ee431111dffd82143565a50c84859c6a9c64
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.