ELSA-2026-55437

ELSA-2026-55437 - bind security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-17

Description

[9.18.33-15.0.1.el10_2.10]
- Hard require needed openssl-libs [Orabug: 38742109]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.18.33-15.10]
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)

[32:9.18.33-15.9]
- Reject out-of-zone NSEC next owner names (CVE-2026-13321)

[32:9.18.33-15.7]
- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)

[32:9.18.33-15.6]
- Fix RRSIG label count validation for wildcard cache poisoning
(CVE-2026-11721)

[32:9.18.33-15.5]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)

[32:9.18.33-15.4]
- Fix assertion failure on malformed NSEC/NSEC3 responses
(CVE-2026-13204)

[32:9.18.33-15.2]
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

[32:9.18.33-15.1]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)

Related CVEs

CVE-2026-10723

CVE-2026-11331

CVE-2026-11622

CVE-2026-11721

CVE-2026-13204

CVE-2026-13321

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	bind-9.18.33-15.0.1.el10_2.10.src.rpm	9f354c504d905f42c34c978415495c032444dd6b33b9daee42c54dc053426da2	-	ol10_aarch64_appstream
	bind-9.18.33-15.0.1.el10_2.10.src.rpm	9f354c504d905f42c34c978415495c032444dd6b33b9daee42c54dc053426da2	-	ol10_aarch64_codeready_builder
	bind-9.18.33-15.0.1.el10_2.10.aarch64.rpm	9243b1fb1fb9bc10a971a196a9341f3cc827414847a08c9f36225999e87c97d6	-	ol10_aarch64_appstream
	bind-chroot-9.18.33-15.0.1.el10_2.10.aarch64.rpm	41ad8788e4e86d8a0c413b412ea73bf166b36754af9e9dd85db79b1b9eb3b7d5	-	ol10_aarch64_appstream
	bind-devel-9.18.33-15.0.1.el10_2.10.aarch64.rpm	38d5b227e8c42581cdb07c962475f333912f7d2cbd26ff23be856a930c9b3ef5	-	ol10_aarch64_codeready_builder
	bind-dnssec-utils-9.18.33-15.0.1.el10_2.10.aarch64.rpm	cf5778dbed21eb1a18df8304c341f9da83a2297a888c03317b896f78c379801d	-	ol10_aarch64_appstream
	bind-doc-9.18.33-15.0.1.el10_2.10.noarch.rpm	deac141be0a15e77c20a8550edf840564ebe14d52e6fe9cfafda981ecc1a4d82	-	ol10_aarch64_codeready_builder
	bind-libs-9.18.33-15.0.1.el10_2.10.aarch64.rpm	fd70dd8929c840d9213388ffbe741b3e673a0e9302ce6e1e3c2ae1c2a78c8d7f	-	ol10_aarch64_appstream
	bind-license-9.18.33-15.0.1.el10_2.10.noarch.rpm	b8c479f8b420cb65846f9056250878622032d63af2436fdec7b4f73c1fcf96e8	-	ol10_aarch64_appstream
	bind-utils-9.18.33-15.0.1.el10_2.10.aarch64.rpm	cc946d7356c311ac38a1f5dd0e5e360f5d676e306af956be367bd72077f67191	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	bind-9.18.33-15.0.1.el10_2.10.src.rpm	9f354c504d905f42c34c978415495c032444dd6b33b9daee42c54dc053426da2	-	ol10_x86_64_appstream
	bind-9.18.33-15.0.1.el10_2.10.src.rpm	9f354c504d905f42c34c978415495c032444dd6b33b9daee42c54dc053426da2	-	ol10_x86_64_codeready_builder
	bind-9.18.33-15.0.1.el10_2.10.x86_64.rpm	da3d2d602e120da4ce3430685880f16669ed49eeaa95316631ac5c3692f674c1	-	ol10_x86_64_appstream
	bind-chroot-9.18.33-15.0.1.el10_2.10.x86_64.rpm	6507c8776aea008f9bc74f712430a0ea1bbb99eacf3d98a684cc8c7a61efa69c	-	ol10_x86_64_appstream
	bind-devel-9.18.33-15.0.1.el10_2.10.x86_64.rpm	f9c3bfc760058960b665dbed2359991f9fb296f7364fd17111d4fc1aad8a77c2	-	ol10_x86_64_codeready_builder
	bind-dnssec-utils-9.18.33-15.0.1.el10_2.10.x86_64.rpm	064cbe402212186c6b8fc5cf9a21093c9da963bc66ba99ff5c06c3031b1d3dd8	-	ol10_x86_64_appstream
	bind-doc-9.18.33-15.0.1.el10_2.10.noarch.rpm	deac141be0a15e77c20a8550edf840564ebe14d52e6fe9cfafda981ecc1a4d82	-	ol10_x86_64_codeready_builder
	bind-libs-9.18.33-15.0.1.el10_2.10.x86_64.rpm	c16e0fab45e29c13c15506cdb2cb8d7e667c38e3a414b9407331cf1669fcf1d3	-	ol10_x86_64_appstream
	bind-license-9.18.33-15.0.1.el10_2.10.noarch.rpm	b8c479f8b420cb65846f9056250878622032d63af2436fdec7b4f73c1fcf96e8	-	ol10_x86_64_appstream
	bind-utils-9.18.33-15.0.1.el10_2.10.x86_64.rpm	d9677afc5b4d724ff0aa23dc58cb01c6d3a6c73242c45607495f2beabe6826ba	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team