ALSA-2026:54510

[ALSA-2026:54510] Important: bind security update

Type:

security

Severity:

important

Release date:

2026-08-14

Description:

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)
  * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)
  * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)
  * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)
  * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)
  * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	bind-devel-9.16.23-40.el9_8.8.aarch64.rpm	477ae98a6cb238ba5ed302be591710dd2b067d6a26ead3fb6adb30065408be0c
aarch64	bind-libs-9.16.23-40.el9_8.8.aarch64.rpm	4efe909e25283150bc6bd68e9539dc5f74f21023742678fa04a4f6e87a33a2c5
aarch64	bind-utils-9.16.23-40.el9_8.8.aarch64.rpm	57e4950ba95d599289766fa7a17166aa289ce256c91cd17ec2d179169482d822
aarch64	bind-9.16.23-40.el9_8.8.aarch64.rpm	db3d4325ea3a69edbb20f53eb62b626eab2699b582b141fb34931f8ebcbc4f23
aarch64	bind-chroot-9.16.23-40.el9_8.8.aarch64.rpm	ed36ec5cc36f16de9e02ffbd32cd1f7225669dd92b7ef08a63e2dc40038941f9
aarch64	bind-dnssec-utils-9.16.23-40.el9_8.8.aarch64.rpm	f62968aee423eec456f2cb50a5c9423725ef9c1cdddd8963e97e442952b2c81e
i686	bind-libs-9.16.23-40.el9_8.8.i686.rpm	1a094953496e53ec0dd784b457c903618a025d98c54baae2f7b980666ec0f7ee
i686	bind-devel-9.16.23-40.el9_8.8.i686.rpm	46927cfdb3bde15d976fd49d83ba33a610055f9d063c7b925da355bfc859a809
noarch	bind-dnssec-doc-9.16.23-40.el9_8.8.noarch.rpm	6433eff2e76b241a99cc9a386e2fb06c5d9533e22a413bd4d862fb6109857dcf
noarch	bind-doc-9.16.23-40.el9_8.8.noarch.rpm	707e97caec593d461f991261508fa9381c00491912300c14df52d4d4823da370
noarch	bind-license-9.16.23-40.el9_8.8.noarch.rpm	947b2ea665eca12f5c7c9ba9da27dafee27caedc3d5cc453f49e00d2dceab840
noarch	python3-bind-9.16.23-40.el9_8.8.noarch.rpm	d26933328930f69a07eaf5eefcaa302fc57416f02a419bd5932fbba18cce169e
ppc64le	bind-dnssec-utils-9.16.23-40.el9_8.8.ppc64le.rpm	0f2d4709a6d252afe64d29f115f97d40b52e1287673015b469d022666220087c
ppc64le	bind-libs-9.16.23-40.el9_8.8.ppc64le.rpm	49faa79570195618c4a0fb3131661c72051b797fbebcc7befb90ad3522be712c
ppc64le	bind-9.16.23-40.el9_8.8.ppc64le.rpm	c36ce76d5206de29dcfe6781283ac0edeef9d709526572a23ef98a2b929fbc45
ppc64le	bind-devel-9.16.23-40.el9_8.8.ppc64le.rpm	d1e03099ef94eb2a626c10e5a6879c5634bc0b1e9ef092ee7c8ffe83b52449b8
ppc64le	bind-chroot-9.16.23-40.el9_8.8.ppc64le.rpm	e4a8f285d90120055833cffb24516c07f7d8a42df8c217f758aec800012a238b
ppc64le	bind-utils-9.16.23-40.el9_8.8.ppc64le.rpm	f0cfb910fb3268a6613453baa229d4332821ebb70af86029dfb237818ea04758
s390x	bind-chroot-9.16.23-40.el9_8.8.s390x.rpm	1f2ebc5e73c695f72f94a6d424827ba7b8f06db0125e0b032915ecc67594bea0
s390x	bind-utils-9.16.23-40.el9_8.8.s390x.rpm	46aa293fe967eff9428591cdb4794f7b1cbe5d8ea58323a87e82f13c16e262cc
s390x	bind-9.16.23-40.el9_8.8.s390x.rpm	74c7c201475708cce87e6d0cd22ca67c353d5255889f0912cd97a7d7e1dfc311
s390x	bind-dnssec-utils-9.16.23-40.el9_8.8.s390x.rpm	81e43e597c5efdca947721c72a63e136ccd8e793712ee8139c206f8103f86395
s390x	bind-libs-9.16.23-40.el9_8.8.s390x.rpm	9543ca3b624e56977d5ba0b421005fcf53a72ccd1b27408ad2696a02475ffb27
s390x	bind-devel-9.16.23-40.el9_8.8.s390x.rpm	d9fc6998f482366df2af1205340ff36b2b5eeaf7420e738db650eba18a9123f9
x86_64	bind-dnssec-utils-9.16.23-40.el9_8.8.x86_64.rpm	06874913d73150dfe502c2064b26183fea495e82b58262d0348e1674f76c3ce8
x86_64	bind-9.16.23-40.el9_8.8.x86_64.rpm	13eaeaf75f92881b4f6197e178165c934eb653c91928a1a18520dfbb82dd4960
x86_64	bind-devel-9.16.23-40.el9_8.8.x86_64.rpm	2951206ad4bfeb4b97ae2ecb560ed5b1801a4ed0e8ce49af2c31b7f83369070d
x86_64	bind-utils-9.16.23-40.el9_8.8.x86_64.rpm	5d632f34dd19d0f68ee665653aba9af01335a2a4758e9f9b000866a4883d2d22
x86_64	bind-libs-9.16.23-40.el9_8.8.x86_64.rpm	8b9d632cab90d1689c9d818511a55cd695efc5481130207ac20a09d5e09000f4
x86_64	bind-chroot-9.16.23-40.el9_8.8.x86_64.rpm	ae65a6a6dc113cdb0e77acb638986d0d31ebff9aa4d23d063cf1f0341f93bf42

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.