ELSA-2026-54509

ELSA-2026-54509 - bind9.16 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-08-13

Description


[32:9.16.23-0.22.12]
- Fix NSEC3 signer validation (CVE-2026-10723)
- Resolves: RHEL-213499

[32:9.16.23-0.22.11]
- Reject out-of-zone NSEC next owner names (CVE-2026-13321)
- Resolves: RHEL-213313

[32:9.16.23-0.22.10]
- Fix CVE-2026-11622: reference-counted DNS cache slab headers
- Resolves: RHEL-213396

[32:9.16.23-0.22.9]
- Fix CVE-2026-11721: RRSIG labels validation and out-of-zone signing
- Add new unit test
- Resolves: RHEL-213406

[32:9.16.23-0.22.8]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)
- Add upstream rpz system test
- Resolves: RHEL-213478

[32:9.16.23-0.22.7]
- Fix CVE-2026-13204: ensure NSEC/NSEC3 has matching RRSIG
- Resolves: RHEL-213478


Related CVEs


CVE-2026-10723
CVE-2026-11331
CVE-2026-11622
CVE-2026-11721
CVE-2026-13204
CVE-2026-13321

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) bind9.16-9.16.23-0.22.el8_10.12.src.rpm68078d9df1c43ba36193bee92ec7a31090d3f5213f368dceff788f695cbe7f8a-ol8_aarch64_appstream
bind9.16-9.16.23-0.22.el8_10.12.src.rpm68078d9df1c43ba36193bee92ec7a31090d3f5213f368dceff788f695cbe7f8a-ol8_aarch64_codeready_builder
bind9.16-9.16.23-0.22.el8_10.12.aarch64.rpm364610c217e4172078bd45dcfc958836bd2940eef262f9729085b91e9855169a-ol8_aarch64_appstream
bind9.16-chroot-9.16.23-0.22.el8_10.12.aarch64.rpm1fc371cfdd2f6c3648985bed9ad9ce90bf1f7faade883d14226ab0dc19a0fe35-ol8_aarch64_appstream
bind9.16-devel-9.16.23-0.22.el8_10.12.aarch64.rpm5688fd2005f0052ba72ea9f48831e5e2aa6f39990c4aa8a2ffaa72c11c877042-ol8_aarch64_codeready_builder
bind9.16-dnssec-utils-9.16.23-0.22.el8_10.12.aarch64.rpmf48689130055db61b57cfc06a401f3d70e803cc00739ec0999fd91511ae75c54-ol8_aarch64_appstream
bind9.16-doc-9.16.23-0.22.el8_10.12.noarch.rpmdbc6a6feaa1f66476db112db43a24dcb7d550d1ef5206db5db219de943ac350b-ol8_aarch64_codeready_builder
bind9.16-libs-9.16.23-0.22.el8_10.12.aarch64.rpm85aaecf3a47d3ed261a26964766b620460351bbd9bdb4b2e7fc36ae4a8cf1d91-ol8_aarch64_appstream
bind9.16-license-9.16.23-0.22.el8_10.12.noarch.rpm1ab8dff751a8e23934c830dd9a2205c9fb7e1444df8ff4b1d83d08f11bbf520b-ol8_aarch64_appstream
bind9.16-utils-9.16.23-0.22.el8_10.12.aarch64.rpmf3e523305f228f543491414582ae828834753fdd8fc242931137d0ef9ead13c7-ol8_aarch64_appstream
python3-bind9.16-9.16.23-0.22.el8_10.12.noarch.rpm05efbfa3aa5f332eec3310281c35ffd974c24ed012a7f3afbc418f4c5746cbb5-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) bind9.16-9.16.23-0.22.el8_10.12.src.rpm68078d9df1c43ba36193bee92ec7a31090d3f5213f368dceff788f695cbe7f8a-ol8_x86_64_appstream
bind9.16-9.16.23-0.22.el8_10.12.src.rpm68078d9df1c43ba36193bee92ec7a31090d3f5213f368dceff788f695cbe7f8a-ol8_x86_64_codeready_builder
bind9.16-9.16.23-0.22.el8_10.12.x86_64.rpm5de8bea69b64164a7974b6f91070e32006b971b23ebe9a5962c1685c722a89b1-ol8_x86_64_appstream
bind9.16-chroot-9.16.23-0.22.el8_10.12.x86_64.rpmd6ad7415410b25b2a5740d88c1d77f507a1ab4bef906ed3fb63a7a9f5a2c7864-ol8_x86_64_appstream
bind9.16-devel-9.16.23-0.22.el8_10.12.i686.rpme6199b6561668af007ee8cc54016375a59cf570e2164067ac8e09ebc3b33b484-ol8_x86_64_codeready_builder
bind9.16-devel-9.16.23-0.22.el8_10.12.x86_64.rpm4c7bac3b05b86c5dee5b360b1bc1c8a6688614320e1414806abe4e101573f566-ol8_x86_64_codeready_builder
bind9.16-dnssec-utils-9.16.23-0.22.el8_10.12.x86_64.rpmecfb371a766b26500bf2e4f84b2c209bfe42261702902a4a19ec2c222909e0fa-ol8_x86_64_appstream
bind9.16-doc-9.16.23-0.22.el8_10.12.noarch.rpmdbc6a6feaa1f66476db112db43a24dcb7d550d1ef5206db5db219de943ac350b-ol8_x86_64_codeready_builder
bind9.16-libs-9.16.23-0.22.el8_10.12.i686.rpmb2648aeb8b70f5eb36575c0144ae1ef4c851e8445054757dbeaa3f4d19a6b096-ol8_x86_64_codeready_builder
bind9.16-libs-9.16.23-0.22.el8_10.12.x86_64.rpm41a63ba1a377f2ba2ef1221ccd8e4a7af91f868359d065c9f7ea76d62eee1b34-ol8_x86_64_appstream
bind9.16-license-9.16.23-0.22.el8_10.12.noarch.rpm1ab8dff751a8e23934c830dd9a2205c9fb7e1444df8ff4b1d83d08f11bbf520b-ol8_x86_64_appstream
bind9.16-utils-9.16.23-0.22.el8_10.12.x86_64.rpmf00d30f63ff81f1ee68741303b4904e09862d405df66fc6a29102295ca4ad504-ol8_x86_64_appstream
python3-bind9.16-9.16.23-0.22.el8_10.12.noarch.rpm05efbfa3aa5f332eec3310281c35ffd974c24ed012a7f3afbc418f4c5746cbb5-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete