ELBA-2026-67973

ELBA-2026-67973 - bind bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2026-09-17

Description

[9.16.23-40.0.1.el9_8.9]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.16.23-40.9]
- Add new root key 38696 into package files (RHEL-255763)
- Update built-in anchors in delv and named

[32:9.16.23-40.8]
- Fix NSEC3 signer validation (CVE-2026-10723)

[32:9.16.23-40.7]
- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names

[32:9.16.23-40.6]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)

[32:9.16.23-40.5]
- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
(CVE-2026-13204)

[32:9.16.23-40.4]
- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)

[32:9.16.23-40.3]
- Prevent cache memory exhaustion under sustained attack
(CVE-2026-11622, RHEL-213397)

[32:9.16.23-40.2]
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

[32:9.16.23-40.1]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	bind-9.16.23-40.0.1.el9_8.9.src.rpm	32db8abc8cad5aa6f1b6da707fbde0f4755035cd22ddc707ec1f0a424efe729d	-	ol9_aarch64_appstream
	bind-9.16.23-40.0.1.el9_8.9.src.rpm	32db8abc8cad5aa6f1b6da707fbde0f4755035cd22ddc707ec1f0a424efe729d	-	ol9_aarch64_codeready_builder
	bind-9.16.23-40.0.1.el9_8.9.aarch64.rpm	4a78f8ebbdd7d59f39ce33dcd8ed52cf4c700160916c9b65aebea1e1f08baeaf	-	ol9_aarch64_appstream
	bind-chroot-9.16.23-40.0.1.el9_8.9.aarch64.rpm	21b256736aae636871b49b3d1f2e2e9b2bd3bbf1a88381eb93b842cfbb5f687a	-	ol9_aarch64_appstream
	bind-devel-9.16.23-40.0.1.el9_8.9.aarch64.rpm	b8d9e1e6a1b2b5b7e7c0491506102b8452fed798024f03e607df92d3a886c14d	-	ol9_aarch64_codeready_builder
	bind-dnssec-doc-9.16.23-40.0.1.el9_8.9.noarch.rpm	522883a4144aa24d68ee942c027730382c53d5faf6f5739e50814c1283f090fa	-	ol9_aarch64_appstream
	bind-dnssec-utils-9.16.23-40.0.1.el9_8.9.aarch64.rpm	2e675ab241b86d65563a7fde67e72433a053723c1b22ce1e3462cda479d0f11e	-	ol9_aarch64_appstream
	bind-doc-9.16.23-40.0.1.el9_8.9.noarch.rpm	54e652dd6a5887ad604e2926c29e3bba88b71e7f2c99a4e9488666978f28e08c	-	ol9_aarch64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.9.aarch64.rpm	148d17eb5125279228bec6638d50720cdc4751e17cb1f022ec6ef3d9a6f6e2f4	-	ol9_aarch64_appstream
	bind-license-9.16.23-40.0.1.el9_8.9.noarch.rpm	5deb81b72c36e8270c423e8ab72721725064931e04224f8b22c9c5bc101603ed	-	ol9_aarch64_appstream
	bind-utils-9.16.23-40.0.1.el9_8.9.aarch64.rpm	22bc7fb61be299ebdde1fb6f9b2ee3c50c2f6e5adcce9a980df5ae3833c313fb	-	ol9_aarch64_appstream
	python3-bind-9.16.23-40.0.1.el9_8.9.noarch.rpm	cf081748f8d4b2d1c542886e473866b6d9ca5e4d5385489004279c717f367158	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	bind-9.16.23-40.0.1.el9_8.9.src.rpm	32db8abc8cad5aa6f1b6da707fbde0f4755035cd22ddc707ec1f0a424efe729d	-	ol9_x86_64_appstream
	bind-9.16.23-40.0.1.el9_8.9.src.rpm	32db8abc8cad5aa6f1b6da707fbde0f4755035cd22ddc707ec1f0a424efe729d	-	ol9_x86_64_codeready_builder
	bind-9.16.23-40.0.1.el9_8.9.x86_64.rpm	50c778b6eb7d6e38d61e75186ae0cdb3c78bce617551f8a96e7093ecaa433a6e	-	ol9_x86_64_appstream
	bind-chroot-9.16.23-40.0.1.el9_8.9.x86_64.rpm	7a8b9db0d6497fddf043f37027e208295a73606be7245f7b1c1d47b1532ab462	-	ol9_x86_64_appstream
	bind-devel-9.16.23-40.0.1.el9_8.9.i686.rpm	8495248a33bb4f8599646ec3ed463f34696b48745abf01fd144f3493cd47131a	-	ol9_x86_64_codeready_builder
	bind-devel-9.16.23-40.0.1.el9_8.9.x86_64.rpm	babca925f352a33eeb154f70346579cb3b7d983f5ca0382bcce1bb8997a9882f	-	ol9_x86_64_codeready_builder
	bind-dnssec-doc-9.16.23-40.0.1.el9_8.9.noarch.rpm	522883a4144aa24d68ee942c027730382c53d5faf6f5739e50814c1283f090fa	-	ol9_x86_64_appstream
	bind-dnssec-utils-9.16.23-40.0.1.el9_8.9.x86_64.rpm	f3aeb779631ad6cc2cf588decc6421c19a568cf32f2b05a35c5edb8017577281	-	ol9_x86_64_appstream
	bind-doc-9.16.23-40.0.1.el9_8.9.noarch.rpm	54e652dd6a5887ad604e2926c29e3bba88b71e7f2c99a4e9488666978f28e08c	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.9.i686.rpm	821ea568d0aecd294cea0a0940c5bf72a8bb5b69bd14ffef6cc1fd6a4c3c747b	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.9.x86_64.rpm	8e31cd4a30e63fa6e7d322f9527107bd3031ab9d53e35f6fde2092ab6f3bc631	-	ol9_x86_64_appstream
	bind-license-9.16.23-40.0.1.el9_8.9.noarch.rpm	5deb81b72c36e8270c423e8ab72721725064931e04224f8b22c9c5bc101603ed	-	ol9_x86_64_appstream
	bind-utils-9.16.23-40.0.1.el9_8.9.x86_64.rpm	519d200eae6eca09767cb3a834946b528a985a09211628e8b7d9d8e56cb8151f	-	ol9_x86_64_appstream
	python3-bind-9.16.23-40.0.1.el9_8.9.noarch.rpm	cf081748f8d4b2d1c542886e473866b6d9ca5e4d5385489004279c717f367158	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team