ELSA-2026-24338

ELSA-2026-24338 - bind security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-16

Description

[9.18.33-15.0.1.el10_2.2]
- Hard require needed openssl-libs [Orabug: 38742109]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.18.33-15.2]
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

[32:9.18.33-15.1]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)

Related CVEs

CVE-2026-3039

CVE-2026-5946

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	bind-9.18.33-15.0.1.el10_2.2.src.rpm	20b7c7b125fb73bc67eecaf2723724b17d311851d81695f8601f708b61f5c2ef	-	ol10_aarch64_appstream
	bind-9.18.33-15.0.1.el10_2.2.src.rpm	20b7c7b125fb73bc67eecaf2723724b17d311851d81695f8601f708b61f5c2ef	-	ol10_aarch64_codeready_builder
	bind-9.18.33-15.0.1.el10_2.2.aarch64.rpm	8855cc3e8c0f24ca090e8327d569e358f708e02539d5bc86c47138270ba26e32	-	ol10_aarch64_appstream
	bind-chroot-9.18.33-15.0.1.el10_2.2.aarch64.rpm	8bea50cee7c0b4a5f96f25b13f2533cde917b8206fbb31bdf3a6e024a0abe9a8	-	ol10_aarch64_appstream
	bind-devel-9.18.33-15.0.1.el10_2.2.aarch64.rpm	0e48b0903200372c145576b703bd62a1a65b692efedfb89014a5602aba49ee21	-	ol10_aarch64_codeready_builder
	bind-dnssec-utils-9.18.33-15.0.1.el10_2.2.aarch64.rpm	d11790fc142d3c1afd5461e96df9dae313dc3ce8b7cabf10baf03bc85b446d4f	-	ol10_aarch64_appstream
	bind-doc-9.18.33-15.0.1.el10_2.2.noarch.rpm	fd32dc6a059c41b0e25b944866c68999035e2c4f1cbe685276125e8ad4326754	-	ol10_aarch64_codeready_builder
	bind-libs-9.18.33-15.0.1.el10_2.2.aarch64.rpm	953ab33b5f5765f28d6985753a83a59f8d042fe8ba492a1e6e4b68c8be416f72	-	ol10_aarch64_appstream
	bind-license-9.18.33-15.0.1.el10_2.2.noarch.rpm	d67f0c8ff7ee2a3c7e612c61fcb0fffb7ff02d8df25e8b8d02ebffcea60ab82f	-	ol10_aarch64_appstream
	bind-utils-9.18.33-15.0.1.el10_2.2.aarch64.rpm	230f18004fd3daa427cd359e8e7e72426398d49e1e649aa469cbcf47fd4a17b5	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	bind-9.18.33-15.0.1.el10_2.2.src.rpm	20b7c7b125fb73bc67eecaf2723724b17d311851d81695f8601f708b61f5c2ef	-	ol10_x86_64_appstream
	bind-9.18.33-15.0.1.el10_2.2.src.rpm	20b7c7b125fb73bc67eecaf2723724b17d311851d81695f8601f708b61f5c2ef	-	ol10_x86_64_codeready_builder
	bind-9.18.33-15.0.1.el10_2.2.x86_64.rpm	3040816f28057807e07e483ba3052dfdc586f9309d16bfdd6a50dcbe511612d6	-	ol10_x86_64_appstream
	bind-chroot-9.18.33-15.0.1.el10_2.2.x86_64.rpm	210f0662cbc3a74167e872949f523cc65b919a514f7dd13f6caa87ce7a7e88c8	-	ol10_x86_64_appstream
	bind-devel-9.18.33-15.0.1.el10_2.2.x86_64.rpm	3ed30a418101af9236bfeecab3e1a55d447be15c2aa113da62e35a6e0ab5999f	-	ol10_x86_64_codeready_builder
	bind-dnssec-utils-9.18.33-15.0.1.el10_2.2.x86_64.rpm	80ab0fae745164eaa448ca09a3fb7049d5b93bc2f38e3cd43d70d87984473f29	-	ol10_x86_64_appstream
	bind-doc-9.18.33-15.0.1.el10_2.2.noarch.rpm	fd32dc6a059c41b0e25b944866c68999035e2c4f1cbe685276125e8ad4326754	-	ol10_x86_64_codeready_builder
	bind-libs-9.18.33-15.0.1.el10_2.2.x86_64.rpm	1e4d10802957cc7bac43cf03961af4e530593f7f64c9df26c603c22e14fff267	-	ol10_x86_64_appstream
	bind-license-9.18.33-15.0.1.el10_2.2.noarch.rpm	d67f0c8ff7ee2a3c7e612c61fcb0fffb7ff02d8df25e8b8d02ebffcea60ab82f	-	ol10_x86_64_appstream
	bind-utils-9.18.33-15.0.1.el10_2.2.x86_64.rpm	87a5b854ec1f3cccabec455230f08bb19573e2006cc9337d5c9209a066832973	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team