ELBA-2026-69944

ELBA-2026-69944 - bind bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2026-09-22

Description

[9.18.33-15.0.1.el10_2.11]
- Hard require needed openssl-libs [Orabug: 38742109]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.18.33-15.11]
- Add new root key 38696 into package files too (RHEL-252999)

[32:9.18.33-15.10]
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)

[32:9.18.33-15.9]
- Reject out-of-zone NSEC next owner names (CVE-2026-13321)

[32:9.18.33-15.7]
- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)

[32:9.18.33-15.6]
- Fix RRSIG label count validation for wildcard cache poisoning
(CVE-2026-11721)

[32:9.18.33-15.5]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)

[32:9.18.33-15.4]
- Fix assertion failure on malformed NSEC/NSEC3 responses
(CVE-2026-13204)

[32:9.18.33-15.2]
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

[32:9.18.33-15.1]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	bind-9.18.33-15.0.1.el10_2.11.src.rpm	e8ed9a0846dbd9f5f3f560b3139fc07c010b45773579264fe49bbd1b63396367	-	ol10_aarch64_appstream
	bind-9.18.33-15.0.1.el10_2.11.src.rpm	e8ed9a0846dbd9f5f3f560b3139fc07c010b45773579264fe49bbd1b63396367	-	ol10_aarch64_codeready_builder
	bind-9.18.33-15.0.1.el10_2.11.aarch64.rpm	c1941d1e1fc0349aa9cba97cb14a0737567964091df5148a5cc2b851817805ca	-	ol10_aarch64_appstream
	bind-chroot-9.18.33-15.0.1.el10_2.11.aarch64.rpm	27064ff074ebc5793d6cd20e35c972becfc09b101c009b09fc50100a69a8c805	-	ol10_aarch64_appstream
	bind-devel-9.18.33-15.0.1.el10_2.11.aarch64.rpm	96a22ced72020d35d143b518fc6ee99f8d09369d1e97db09024b20e9321e6472	-	ol10_aarch64_codeready_builder
	bind-dnssec-utils-9.18.33-15.0.1.el10_2.11.aarch64.rpm	79582d63ff73b8bfd8817df150b8c47b0fc32f5bbb4774e882e6e6a644714882	-	ol10_aarch64_appstream
	bind-doc-9.18.33-15.0.1.el10_2.11.noarch.rpm	76cfbedd9d6fbaa6b24487fce14e50d9b81055970436fcdad1579bd4e16cc37b	-	ol10_aarch64_codeready_builder
	bind-libs-9.18.33-15.0.1.el10_2.11.aarch64.rpm	1ff7a918230c9208bafb6acdfe24d2c63883f2663a5d7419822745e2d5a7a73b	-	ol10_aarch64_appstream
	bind-license-9.18.33-15.0.1.el10_2.11.noarch.rpm	71df4c16247428c7bb9f2d13a089e9ac782744fa41541bf60ede00039c5c1a5e	-	ol10_aarch64_appstream
	bind-utils-9.18.33-15.0.1.el10_2.11.aarch64.rpm	ac5a5ebe6f64636381dd25ce5b297bb783fb5bb8d5578035656b8d8d1c98bc37	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	bind-9.18.33-15.0.1.el10_2.11.src.rpm	e8ed9a0846dbd9f5f3f560b3139fc07c010b45773579264fe49bbd1b63396367	-	ol10_x86_64_appstream
	bind-9.18.33-15.0.1.el10_2.11.src.rpm	e8ed9a0846dbd9f5f3f560b3139fc07c010b45773579264fe49bbd1b63396367	-	ol10_x86_64_codeready_builder
	bind-9.18.33-15.0.1.el10_2.11.x86_64.rpm	c0c5a6f0b4a6a945836bac028eaef0cd17da902c6088efb7df4ecfd726ed25b3	-	ol10_x86_64_appstream
	bind-chroot-9.18.33-15.0.1.el10_2.11.x86_64.rpm	2f4baca00d9d7aaa37bfe0df5a9e70cac04f6905c719d042bd5e88453b90e47d	-	ol10_x86_64_appstream
	bind-devel-9.18.33-15.0.1.el10_2.11.x86_64.rpm	6d3f34c049d6658f9c926d6f4f9b8ba89a2cd6bf68a5d90a115ab533f2c413c2	-	ol10_x86_64_codeready_builder
	bind-dnssec-utils-9.18.33-15.0.1.el10_2.11.x86_64.rpm	9b10e6885d086534c274229534fb360a286b302b29076f1d219957f016ca5a70	-	ol10_x86_64_appstream
	bind-doc-9.18.33-15.0.1.el10_2.11.noarch.rpm	76cfbedd9d6fbaa6b24487fce14e50d9b81055970436fcdad1579bd4e16cc37b	-	ol10_x86_64_codeready_builder
	bind-libs-9.18.33-15.0.1.el10_2.11.x86_64.rpm	77a78d1175bda4a32125946a52ce494d691294cc0f6b118c7144e192190144b5	-	ol10_x86_64_appstream
	bind-license-9.18.33-15.0.1.el10_2.11.noarch.rpm	71df4c16247428c7bb9f2d13a089e9ac782744fa41541bf60ede00039c5c1a5e	-	ol10_x86_64_appstream
	bind-utils-9.18.33-15.0.1.el10_2.11.x86_64.rpm	00d0fa2c32bda3d9b4bbc71d76bc6263ad86eddec99566acda4408070a3c45ce	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team