ELSA-2026-54510

ELSA-2026-54510 - bind security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-13

Description

[9.16.23-40.0.1.el9_8.8]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.16.23-40.8]
- Fix NSEC3 signer validation (CVE-2026-10723)

[32:9.16.23-40.7]
- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names

[32:9.16.23-40.6]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)

[32:9.16.23-40.5]
- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
(CVE-2026-13204)

[32:9.16.23-40.4]
- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)

[32:9.16.23-40.3]
- Prevent cache memory exhaustion under sustained attack
(CVE-2026-11622, RHEL-213397)

[32:9.16.23-40.2]
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

[32:9.16.23-40.1]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)

Related CVEs

CVE-2026-10723

CVE-2026-11331

CVE-2026-11622

CVE-2026-11721

CVE-2026-13204

CVE-2026-13321

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	bind-9.16.23-40.0.1.el9_8.8.src.rpm	c82bdcace5b8d0aa369dadad3da2a28c105cfa9be627b5f1752773e1755f4ec5	-	ol9_aarch64_appstream
	bind-9.16.23-40.0.1.el9_8.8.src.rpm	c82bdcace5b8d0aa369dadad3da2a28c105cfa9be627b5f1752773e1755f4ec5	-	ol9_aarch64_codeready_builder
	bind-9.16.23-40.0.1.el9_8.8.aarch64.rpm	da59a556460ca26bf15fb1979c4891b547e2d2834690ba52f34c0a577995dfad	-	ol9_aarch64_appstream
	bind-chroot-9.16.23-40.0.1.el9_8.8.aarch64.rpm	06cfbc65790a6e3fdb4db7d696d932766111332e917b28a3a6c20a31cf92ff9a	-	ol9_aarch64_appstream
	bind-devel-9.16.23-40.0.1.el9_8.8.aarch64.rpm	5f78effff81bef38114d388bffbcaa8aec9e10e3dc84bfaee2df3242d227a111	-	ol9_aarch64_codeready_builder
	bind-dnssec-doc-9.16.23-40.0.1.el9_8.8.noarch.rpm	6a045f1e47c784936e7626cc94028619540e14bff5789e6192f9f351c00ea72c	-	ol9_aarch64_appstream
	bind-dnssec-utils-9.16.23-40.0.1.el9_8.8.aarch64.rpm	7520fc94d0d44247c1cf141ca3b9b0547637a75f5d3fb4973fc9954a6a5ee294	-	ol9_aarch64_appstream
	bind-doc-9.16.23-40.0.1.el9_8.8.noarch.rpm	5c6af1bf7713ff5230cf06e15d69e32efe84a3746420766f919cd6dab07cfdc7	-	ol9_aarch64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.8.aarch64.rpm	a248acf1d60dc147bb14a89de90dfcf404726f7b3e0a41df0b2af4473ec44072	-	ol9_aarch64_appstream
	bind-license-9.16.23-40.0.1.el9_8.8.noarch.rpm	957073405ba63141356eeee55cb7ce3e55e81b975fc3a7135962cbb459705cf8	-	ol9_aarch64_appstream
	bind-utils-9.16.23-40.0.1.el9_8.8.aarch64.rpm	317e2928a9545b3e4c7cfb6231873aeab6d9c58c7a8603ec7e6f67077d0ffc37	-	ol9_aarch64_appstream
	python3-bind-9.16.23-40.0.1.el9_8.8.noarch.rpm	15bfaf8b57c385b9e7e4c6ec8363c6e13a3c425edcf755177efd3f133dabd1b3	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	bind-9.16.23-40.0.1.el9_8.8.src.rpm	c82bdcace5b8d0aa369dadad3da2a28c105cfa9be627b5f1752773e1755f4ec5	-	ol9_x86_64_appstream
	bind-9.16.23-40.0.1.el9_8.8.src.rpm	c82bdcace5b8d0aa369dadad3da2a28c105cfa9be627b5f1752773e1755f4ec5	-	ol9_x86_64_codeready_builder
	bind-9.16.23-40.0.1.el9_8.8.x86_64.rpm	e354d7408d82a357d7d927844ed70226ed5f6884ca290d020279adf3eae50a45	-	ol9_x86_64_appstream
	bind-chroot-9.16.23-40.0.1.el9_8.8.x86_64.rpm	beab75f4d29eec3cdc285b8ed62a4b07e09d93f02d7a9b474c6df26772b8d24c	-	ol9_x86_64_appstream
	bind-devel-9.16.23-40.0.1.el9_8.8.i686.rpm	45456decaae0633b2b1dcd55d98e70532d3d70c8f9827a4e7e8d217cb1af73f9	-	ol9_x86_64_codeready_builder
	bind-devel-9.16.23-40.0.1.el9_8.8.x86_64.rpm	fbd516c9b690087a75ccf792673f469815770c9bb07bfbb1034dc06be6bb1eef	-	ol9_x86_64_codeready_builder
	bind-dnssec-doc-9.16.23-40.0.1.el9_8.8.noarch.rpm	6a045f1e47c784936e7626cc94028619540e14bff5789e6192f9f351c00ea72c	-	ol9_x86_64_appstream
	bind-dnssec-utils-9.16.23-40.0.1.el9_8.8.x86_64.rpm	9422e2bf83cc5adfd4700ac8366b178bb06bda38e5dc80f2e1e9a296dae4942a	-	ol9_x86_64_appstream
	bind-doc-9.16.23-40.0.1.el9_8.8.noarch.rpm	5c6af1bf7713ff5230cf06e15d69e32efe84a3746420766f919cd6dab07cfdc7	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.8.i686.rpm	8eb6f893e45d44f0f17ddc830d8829163d5ba1a7c110a2b8340d3c3063a200f6	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.8.x86_64.rpm	d343a7b36496ae96bf8ed06d687f32616cab3236b4027733e958dfa1d50101af	-	ol9_x86_64_appstream
	bind-license-9.16.23-40.0.1.el9_8.8.noarch.rpm	957073405ba63141356eeee55cb7ce3e55e81b975fc3a7135962cbb459705cf8	-	ol9_x86_64_appstream
	bind-utils-9.16.23-40.0.1.el9_8.8.x86_64.rpm	1d2ac7e8c01c1ea70a165f830c58b4dfbbf1e75c4a2d424d015a1349d286717b	-	ol9_x86_64_appstream
	python3-bind-9.16.23-40.0.1.el9_8.8.noarch.rpm	15bfaf8b57c385b9e7e4c6ec8363c6e13a3c425edcf755177efd3f133dabd1b3	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team