{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-13321: check every NSEC record of an RRset against the signer zone,\n not only the first one, on top of the vendor fix\n- CVE-2026-19668: bound the DS to DNSKEY matching in validate_dnskey() so a\n crafted DS and DNSKEY pair cannot force unbounded key tag and digest work\n- CVE-2026-77119: ignore an NSEC3 whose zone does not enclose the DS name when\n proving an insecure delegation", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/advisories/2026/clsa-2026_1791374964.json" } ], "tracking": { "current_release_date": "2026-10-07T12:11:51Z", "generator": { "date": "2026-10-07T12:11:51Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791374964", "initial_release_date": "2026-10-07T12:11:51Z", "revision_history": [ { "date": "2026-10-07T12:11:51Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "bind: Fix of 14 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.8", "product": { "name": "AlmaLinux 9.8", "product_id": "AlmaLinux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.8", "product": { "name": "Rocky Linux 9.8", "product_id": "Rocky Linux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product": { "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_id": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-chroot@9.16.23-40.el9_8.9.tuxcare.els2?arch=aarch64&epoch=32" } } }, { "category": "product_version", "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product": { "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_id": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind@9.16.23-40.el9_8.9.tuxcare.els2?arch=aarch64&epoch=32" } } }, { "category": "product_version", "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product": { "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_id": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-utils@9.16.23-40.el9_8.9.tuxcare.els2?arch=aarch64&epoch=32" } } }, { "category": "product_version", "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product": { "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_id": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-dnssec-utils@9.16.23-40.el9_8.9.tuxcare.els2?arch=aarch64&epoch=32" } } }, { "category": "product_version", "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product": { "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_id": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-devel@9.16.23-40.el9_8.9.tuxcare.els2?arch=aarch64&epoch=32" } } }, { "category": "product_version", "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product": { "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_id": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-libs@9.16.23-40.el9_8.9.tuxcare.els2?arch=aarch64&epoch=32" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product": { "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_id": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-chroot@9.16.23-40.el9_8.9.tuxcare.els2?arch=i686&epoch=32" } } }, { "category": "product_version", "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product": { "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_id": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind@9.16.23-40.el9_8.9.tuxcare.els2?arch=i686&epoch=32" } } }, { "category": "product_version", "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product": { "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_id": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-utils@9.16.23-40.el9_8.9.tuxcare.els2?arch=i686&epoch=32" } } }, { "category": "product_version", "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product": { "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_id": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-dnssec-utils@9.16.23-40.el9_8.9.tuxcare.els2?arch=i686&epoch=32" } } }, { "category": "product_version", "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product": { "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_id": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-devel@9.16.23-40.el9_8.9.tuxcare.els2?arch=i686&epoch=32" } } }, { "category": "product_version", "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product": { "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_id": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-libs@9.16.23-40.el9_8.9.tuxcare.els2?arch=i686&epoch=32" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product": { "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_id": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-chroot@9.16.23-40.el9_8.9.tuxcare.els2?arch=x86_64&epoch=32" } } }, { "category": "product_version", "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product": { "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_id": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind@9.16.23-40.el9_8.9.tuxcare.els2?arch=x86_64&epoch=32" } } }, { "category": "product_version", "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product": { "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_id": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-utils@9.16.23-40.el9_8.9.tuxcare.els2?arch=x86_64&epoch=32" } } }, { "category": "product_version", "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product": { "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_id": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-dnssec-utils@9.16.23-40.el9_8.9.tuxcare.els2?arch=x86_64&epoch=32" } } }, { "category": "product_version", "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product": { "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_id": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-devel@9.16.23-40.el9_8.9.tuxcare.els2?arch=x86_64&epoch=32" } } }, { "category": "product_version", "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product": { "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_id": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-libs@9.16.23-40.el9_8.9.tuxcare.els2?arch=x86_64&epoch=32" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product": { "name": "bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product_id": "bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-dnssec-doc@9.16.23-40.el9_8.9.tuxcare.els2?arch=noarch&epoch=32" } } }, { "category": "product_version", "name": "bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product": { "name": "bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product_id": "bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-doc@9.16.23-40.el9_8.9.tuxcare.els2?arch=noarch&epoch=32" } } }, { "category": "product_version", "name": "bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product": { "name": "bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product_id": "bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bind-license@9.16.23-40.el9_8.9.tuxcare.els2?arch=noarch&epoch=32" } } }, { "category": "product_version", "name": "python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product": { "name": "python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product_id": "python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-bind@9.16.23-40.el9_8.9.tuxcare.els2?arch=noarch&epoch=32" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" }, "product_reference": "bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" }, "product_reference": "bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" }, "product_reference": "bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" }, "product_reference": "python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" }, "product_reference": "bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64" }, "product_reference": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64" }, "product_reference": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686" }, "product_reference": "bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" }, "product_reference": "bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" }, "product_reference": "bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" }, "product_reference": "python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-13321", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "The BIND resolver accepts validly-signed NSEC records where the \"Next Domain Name\" field points outside the signer's zone.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-13321" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.26", "url": "https://downloads.isc.org/isc/bind9/9.20.26" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.24", "url": "https://downloads.isc.org/isc/bind9/9.21.24" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-13321", "url": "https://kb.isc.org/docs/cve-2026-13321" } ], "release_date": "2026-07-22T15:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-19941", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "notes": [ { "category": "description", "text": "An inapplicable NSEC record may be accepted by a `named` resolver as proof that no wildcard exists, which could allow an attacker at the same or an upstream level of the zone name to mask the existence of a victim's wildcard record.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-19941" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.29", "url": "https://downloads.isc.org/isc/bind9/9.20.29" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.26", "url": "https://downloads.isc.org/isc/bind9/9.21.26" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-19941", "url": "https://kb.isc.org/docs/cve-2026-19941" } ], "release_date": "2026-09-16T14:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-19666", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-19666" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.29", "url": "https://downloads.isc.org/isc/bind9/9.20.29" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.26", "url": "https://downloads.isc.org/isc/bind9/9.21.26" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-19666", "url": "https://kb.isc.org/docs/cve-2026-19666" } ], "release_date": "2026-09-16T15:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-19668", "cwe": { "id": "CWE-407", "name": "Inefficient Algorithmic Complexity" }, "notes": [ { "category": "description", "text": "A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default limits on \"max-records-per-type\" and \"max-types-per-name\" help mitigate the exposure.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-19668" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.29", "url": "https://downloads.isc.org/isc/bind9/9.20.29" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.26", "url": "https://downloads.isc.org/isc/bind9/9.21.26" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-19668", "url": "https://kb.isc.org/docs/cve-2026-19668" } ], "release_date": "2026-09-16T15:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-19662", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "An attacker may be able to cause a `named` resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server under the control of the attacker. If the auth responds with a particular sequence of crafted answers, and those answers arrive in a particular order with particular timing, the `named` resolver will encounter a use-after-free bug, and abort.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-19662" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.29", "url": "https://downloads.isc.org/isc/bind9/9.20.29" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-19662", "url": "https://kb.isc.org/docs/cve-2026-19662" } ], "release_date": "2026-09-16T14:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-78301", "cwe": { "id": "CWE-349", "name": "Acceptance of Extraneous Untrusted Data With Trusted Data" }, "notes": [ { "category": "description", "text": "A malformed zone may contain an NS or DNAME node above its origin, which `named` treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server (e.g., via zone transfer), queries for names inside the configured zone then lose authoritative status and return an out-of-zone delegation. On a server that also provides recursion BIND can follow this locally sourced cut and cache attacker-supplied data, affecting names outside the configured zone. This situation persists as long as the malformed zone remains in the zone database.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-78301" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.29", "url": "https://downloads.isc.org/isc/bind9/9.20.29" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.26", "url": "https://downloads.isc.org/isc/bind9/9.21.26" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-78301", "url": "https://kb.isc.org/docs/cve-2026-78301" } ], "release_date": "2026-09-16T14:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-19033", "cwe": { "id": "CWE-349", "name": "Acceptance of Extraneous Untrusted Data With Trusted Data" }, "notes": [ { "category": "description", "text": "For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to a secondary server. Although no TSIG signature ever arrives, `named` does not rollback to the pre-transfer state. To exploit the vulnerability, the transfer must be a multi-message TCP IXFR, as described by RFC 8945.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-19033" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.29", "url": "https://downloads.isc.org/isc/bind9/9.20.29" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.26", "url": "https://downloads.isc.org/isc/bind9/9.21.26" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-19033", "url": "https://kb.isc.org/docs/cve-2026-19033" } ], "release_date": "2026-09-16T15:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-75029", "cwe": { "id": "CWE-405", "name": "Asymmetric Resource Consumption (Amplification)" }, "notes": [ { "category": "description", "text": "In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly lead to other memory attack vectors.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-75029" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.29", "url": "https://downloads.isc.org/isc/bind9/9.20.29" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.26", "url": "https://downloads.isc.org/isc/bind9/9.21.26" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-75029", "url": "https://kb.isc.org/docs/cve-2026-75029" } ], "release_date": "2026-09-16T15:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-5950", "cwe": { "id": "CWE-606", "name": "Unchecked Input for Loop Condition" }, "notes": [ { "category": "description", "text": "An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause severe resource exhaustion by sending queries that trigger specific retry conditions.\nThis issue affects BIND 9 versions 9.18.36 through 9.18.48, 9.20.8 through 9.20.22, 9.21.7 through 9.21.21, 9.18.36-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-5950" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.18.49", "url": "https://downloads.isc.org/isc/bind9/9.18.49" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.23", "url": "https://downloads.isc.org/isc/bind9/9.20.23" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.22", "url": "https://downloads.isc.org/isc/bind9/9.21.22" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-5950", "url": "https://kb.isc.org/docs/cve-2026-5950" } ], "release_date": "2026-05-20T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-19667", "cwe": { "id": "CWE-197", "name": "Numeric Truncation Error" }, "notes": [ { "category": "description", "text": "If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-19667" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.29", "url": "https://downloads.isc.org/isc/bind9/9.20.29" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.26", "url": "https://downloads.isc.org/isc/bind9/9.21.26" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-19667", "url": "https://kb.isc.org/docs/cve-2026-19667" } ], "release_date": "2026-09-16T14:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-77119", "cwe": { "id": "CWE-346", "name": "Origin Validation Error" }, "notes": [ { "category": "description", "text": "A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-77119" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.29", "url": "https://downloads.isc.org/isc/bind9/9.20.29" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.26", "url": "https://downloads.isc.org/isc/bind9/9.21.26" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-77119", "url": "https://kb.isc.org/docs/cve-2026-77119" } ], "release_date": "2026-09-16T15:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-80274", "cwe": { "id": "CWE-617", "name": "Reachable Assertion" }, "notes": [ { "category": "description", "text": "If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-80274" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.29", "url": "https://downloads.isc.org/isc/bind9/9.20.29" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.26", "url": "https://downloads.isc.org/isc/bind9/9.21.26" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-80274", "url": "https://kb.isc.org/docs/cve-2026-80274" } ], "release_date": "2026-09-16T15:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-8677", "cwe": { "id": "CWE-405", "name": "Asymmetric Resource Consumption (Amplification)" }, "notes": [ { "category": "description", "text": "Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8677" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2025-8677", "url": "https://kb.isc.org/docs/cve-2025-8677" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/10/22/1", "url": "http://www.openwall.com/lists/oss-security/2025/10/22/1" } ], "release_date": "2025-10-22T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-3592", "cwe": { "id": "CWE-408", "name": "Incorrect Behavior Order: Early Amplification" }, "notes": [ { "category": "description", "text": "BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources.\nThis issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-3592" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.18.49", "url": "https://downloads.isc.org/isc/bind9/9.18.49" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.20.23", "url": "https://downloads.isc.org/isc/bind9/9.20.23" }, { "category": "external", "summary": "https://downloads.isc.org/isc/bind9/9.21.22", "url": "https://downloads.isc.org/isc/bind9/9.21.22" }, { "category": "external", "summary": "https://kb.isc.org/docs/cve-2026-3592", "url": "https://kb.isc.org/docs/cve-2026-3592" } ], "release_date": "2026-05-20T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T12:09:25.747375Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964", "product_ids": [ "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "AlmaLinux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "AlmaLinux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-chroot-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-devel-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-dnssec-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-dnssec-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-doc-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-libs-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:bind-license-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.aarch64", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.i686", "Rocky Linux-9.8:bind-utils-32:9.16.23-40.el9_8.9.tuxcare.els2.x86_64", "Rocky Linux-9.8:python3-bind-32:9.16.23-40.el9_8.9.tuxcare.els2.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791374964" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }