[CLSA-2026:1791374964] bind: Fix of 14 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-07 12:09:48 UTC
Description:
- CVE-2026-13321: check every NSEC record of an RRset against the signer zone, not only the first one, on top of the vendor fix - CVE-2026-19668: bound the DS to DNSKEY matching in validate_dnskey() so a crafted DS and DNSKEY pair cannot force unbounded key tag and digest work - CVE-2026-77119: ignore an NSEC3 whose zone does not enclose the DS name when proving an insecure delegation
CVEs fixed:
Updated packages:
  • bind-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm
    sha:83d1ac85808d50c1508a5f99076538ddd6ea79ef366da00b698ac7dbfe2d8579
  • bind-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm
    sha:9e13029c28d3274afebbdb71a1ed88b81969b2f3e1fe882ceb657381c358cbca
  • bind-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm
    sha:b0e7478dc0f4587d1acc35727eda742b5413451b1868b732f78ef3b3ed0df8a3
  • bind-chroot-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm
    sha:232548d988f2c94df3ed1fe095da646fe0ab7436f21e56b6ae11be2d03e7dafd
  • bind-chroot-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm
    sha:8e637fa34341aa3e42402dae191b2f2d6c58dffe051694d0cec9bbdbdf77b395
  • bind-chroot-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm
    sha:1f4ccd143599af3586a227e797ca53c2a71e284e1810aa2a3157396ea9e728c9
  • bind-devel-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm
    sha:21b7545ee671c08e22db709779dfefcfd81f8f96d3cee86a1ff89d0a008f08c7
  • bind-devel-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm
    sha:09fead8a33cd3be60ff31aa92c8116e14a7e60c4aa6371a5d85c5b25cd98a7be
  • bind-devel-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm
    sha:5cfc7e693b1a6e1a66183ec64d92303f4a6aa9d8909f83c959c9f764f647934c
  • bind-dnssec-doc-9.16.23-40.el9_8.9.tuxcare.els2.noarch.rpm
    sha:34e1973d490c9eec19d77f5a12aa80f71a5c4a69e42147c8358d08f673dc05ab
  • bind-dnssec-utils-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm
    sha:7b12800e1ba7d1527295ac888476e038a2f35e60bb4e12c3debd29404ae19581
  • bind-dnssec-utils-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm
    sha:4c5aeebad49cd968d9f66c4847f43b2fb9be98fdcada69048c9d68851c8b796c
  • bind-dnssec-utils-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm
    sha:97bd6aa97520457405732ac0e9a5b91d46abcbded0ba236e5fb2b5d0c5fdcd22
  • bind-doc-9.16.23-40.el9_8.9.tuxcare.els2.noarch.rpm
    sha:e0b83912a33ab41a17fae95e2b6a2ba20f3e45c4f40a1ee798983006fd56a4c3
  • bind-libs-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm
    sha:44f2348ad3d08dd015352eaf40ad64856b79e4a1f5cc30ef3a2acf1104aceb68
  • bind-libs-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm
    sha:86ac44be968bc02b2a41be2e53652ce820e8d3aa494f001c1c3f23de03ebf576
  • bind-libs-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm
    sha:7115b367a07627f18092928e02d67319dbcdde359f99b18ba8a8d665ae755460
  • bind-license-9.16.23-40.el9_8.9.tuxcare.els2.noarch.rpm
    sha:60d8884bbb9edb9160e71640e42ddd00b5b52f8a05d403a2433599630942571d
  • bind-utils-9.16.23-40.el9_8.9.tuxcare.els2.aarch64.rpm
    sha:5fb34732d6225c1f44d420514ac4d964516fc4b226a31269438a54e9ab0d1e09
  • bind-utils-9.16.23-40.el9_8.9.tuxcare.els2.i686.rpm
    sha:0a7f016f0570e47d2dc5b1a2375187bd0ad915881a09e59ca19a95881db3d39e
  • bind-utils-9.16.23-40.el9_8.9.tuxcare.els2.x86_64.rpm
    sha:663e0897ede7c53b71655daea51a20f8ce21a7065e86723c74d0dfe205cbd65e
  • python3-bind-9.16.23-40.el9_8.9.tuxcare.els2.noarch.rpm
    sha:8e522b846bce67ed8fa95fd3affb8de106e0931b5bc91194cd051f279cc6eb12
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.