ELSA-2026-75577

ELSA-2026-75577 - bind security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-05

Description

[9.18.33-15.0.1.el10_2.12]
- Hard require needed openssl-libs [Orabug: 38742109]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.18.33-15.12]
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)
- Set limit to following HTTPS/SVCB aliases (CVE-2026-81736)

[32:9.18.33-15.11]
- Add new root key 38696 into package files too (RHEL-252999)

[32:9.18.33-15.10]
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)

[32:9.18.33-15.9]
- Reject out-of-zone NSEC next owner names (CVE-2026-13321)

[32:9.18.33-15.7]
- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)

[32:9.18.33-15.6]
- Fix RRSIG label count validation for wildcard cache poisoning
(CVE-2026-11721)

[32:9.18.33-15.5]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)

[32:9.18.33-15.4]
- Fix assertion failure on malformed NSEC/NSEC3 responses
(CVE-2026-13204)

[32:9.18.33-15.2]
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

Related CVEs

CVE-2026-19666

CVE-2026-19667

CVE-2026-80274

CVE-2026-81563

CVE-2026-81736

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	bind-9.18.33-15.0.1.el10_2.12.src.rpm	774e78296d8fe09b3d3e1b37b979e9f2d5e85c63fff275a92559dfe13f02c8c8	-	ol10_aarch64_appstream
	bind-9.18.33-15.0.1.el10_2.12.src.rpm	774e78296d8fe09b3d3e1b37b979e9f2d5e85c63fff275a92559dfe13f02c8c8	-	ol10_aarch64_codeready_builder
	bind-9.18.33-15.0.1.el10_2.12.aarch64.rpm	09e1d124aef4c0a71ad11e3f7fba4c17fd3f0a9ebeefba904598a730d4a025f7	-	ol10_aarch64_appstream
	bind-chroot-9.18.33-15.0.1.el10_2.12.aarch64.rpm	62f57744c24be195d827e97236e08aab547ca3377df7ddbb7640bdd39d830904	-	ol10_aarch64_appstream
	bind-devel-9.18.33-15.0.1.el10_2.12.aarch64.rpm	b5346cbed9ae5fe34c2ab33797e3fc26aaf750182ddf7f5c51769020007f1434	-	ol10_aarch64_codeready_builder
	bind-dnssec-utils-9.18.33-15.0.1.el10_2.12.aarch64.rpm	61f4381fa4790839bc9854168dfba68e20aa4bfebf9f8ba192c77ae291b0a3ef	-	ol10_aarch64_appstream
	bind-doc-9.18.33-15.0.1.el10_2.12.noarch.rpm	15260fdf6fbc142c52edbea0d19288259405f859c69c4f4451ee7b1e67b9ebc9	-	ol10_aarch64_codeready_builder
	bind-libs-9.18.33-15.0.1.el10_2.12.aarch64.rpm	194f29de67568f8eb56302de53b715605678b0d95a6b1ec4ab264b22577704a2	-	ol10_aarch64_appstream
	bind-license-9.18.33-15.0.1.el10_2.12.noarch.rpm	88334d46086640f649f010dba43188e94c92df7e9b8a66fbe885bd2ecc829f90	-	ol10_aarch64_appstream
	bind-utils-9.18.33-15.0.1.el10_2.12.aarch64.rpm	b20012b0053a6e1183f787d91b69c5391f56f27db999a1aedce4c248d498fb78	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	bind-9.18.33-15.0.1.el10_2.12.src.rpm	774e78296d8fe09b3d3e1b37b979e9f2d5e85c63fff275a92559dfe13f02c8c8	-	ol10_x86_64_appstream
	bind-9.18.33-15.0.1.el10_2.12.src.rpm	774e78296d8fe09b3d3e1b37b979e9f2d5e85c63fff275a92559dfe13f02c8c8	-	ol10_x86_64_codeready_builder
	bind-9.18.33-15.0.1.el10_2.12.x86_64.rpm	96dbbe55df079548f00f7728cc731447c214983d348281c52c046b76d71181ab	-	ol10_x86_64_appstream
	bind-chroot-9.18.33-15.0.1.el10_2.12.x86_64.rpm	79872cc6cd20c3cbfce6bf9ef4f59171fcbcaf0b008db584c58f357b1aeaafd6	-	ol10_x86_64_appstream
	bind-devel-9.18.33-15.0.1.el10_2.12.x86_64.rpm	25fda0d193c5fe03c1334e6ba81e28ffb105bdb95a669ca9fefb89e7ec66eab9	-	ol10_x86_64_codeready_builder
	bind-dnssec-utils-9.18.33-15.0.1.el10_2.12.x86_64.rpm	b93923efa0bf879884eda1be0f31f99c18523716e4c29911808d3548ebad632a	-	ol10_x86_64_appstream
	bind-doc-9.18.33-15.0.1.el10_2.12.noarch.rpm	15260fdf6fbc142c52edbea0d19288259405f859c69c4f4451ee7b1e67b9ebc9	-	ol10_x86_64_codeready_builder
	bind-libs-9.18.33-15.0.1.el10_2.12.x86_64.rpm	c216954d12f21fb196934b317db2c9e7b6aa9c45f99596d7ea119a90ff207ce2	-	ol10_x86_64_appstream
	bind-license-9.18.33-15.0.1.el10_2.12.noarch.rpm	88334d46086640f649f010dba43188e94c92df7e9b8a66fbe885bd2ecc829f90	-	ol10_x86_64_appstream
	bind-utils-9.18.33-15.0.1.el10_2.12.x86_64.rpm	a10e0bb7f1550e3c609881f3ac97a469bd3ea9efc48ae719490d41fb4ebb8b3b	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team