ELSA-2026-55442

ELSA-2026-55442 - bind9.18 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-17

Description

[32:9.18.29-14.8]
- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)

[32:9.18.29-14.7]
- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
RHEL-213314)

[32:9.18.29-14.6]
- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
RHEL-213389)

[32:9.18.29-14.5]
- Reject invalid signed wildcard records (CVE-2026-11721,
RHEL-213417)

[32:9.18.29-14.4]
- Fix RPZ wildcard expansion self-referential CNAME
(CVE-2026-11331, RHEL-213495)

[32:9.18.29-14.3]
- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
RHEL-213495)

Related CVEs

CVE-2026-10723

CVE-2026-11331

CVE-2026-11622

CVE-2026-11721

CVE-2026-13204

CVE-2026-13321

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	bind9.18-9.18.29-14.el9_8.8.src.rpm	1b3f568bb764f5accc398145d5b3c4e9056b4808ad4e865acb928a042b666ce8	-	ol9_aarch64_appstream
	bind9.18-9.18.29-14.el9_8.8.src.rpm	1b3f568bb764f5accc398145d5b3c4e9056b4808ad4e865acb928a042b666ce8	-	ol9_aarch64_codeready_builder
	bind9.18-9.18.29-14.el9_8.8.aarch64.rpm	55c7863c49add536f39788ef9b8ee8b3a39293b6c6a89c5dc7dd8afdda4d6adb	-	ol9_aarch64_appstream
	bind9.18-chroot-9.18.29-14.el9_8.8.aarch64.rpm	33a324aa84a87e9fba6b6ec72d9bac93ba39bd44c47c35b479ef7095e21ae14b	-	ol9_aarch64_appstream
	bind9.18-devel-9.18.29-14.el9_8.8.aarch64.rpm	3dd60b40fc367daf779eebb3a4032df87ea2bf06de9fee6df9059d6b81a06801	-	ol9_aarch64_codeready_builder
	bind9.18-dnssec-utils-9.18.29-14.el9_8.8.aarch64.rpm	7e01e8a1a3a30880a11cb4f1a2e20ee2d2e4c77d4d673817cd04fcd45109fdb5	-	ol9_aarch64_appstream
	bind9.18-doc-9.18.29-14.el9_8.8.noarch.rpm	436c28ccad3b4b8cdda98b99c181421e42b3fc48d78ed5ca5fba6c3192232f9a	-	ol9_aarch64_codeready_builder
	bind9.18-libs-9.18.29-14.el9_8.8.aarch64.rpm	b491d308a88e877d0577a6c0863c444210550dad20d1728dd2fdf4a2a613e3a9	-	ol9_aarch64_appstream
	bind9.18-utils-9.18.29-14.el9_8.8.aarch64.rpm	832941923378e95c826761e364aab6a10813d02ffa1a6849a54b6bb64d903e4b	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	bind9.18-9.18.29-14.el9_8.8.src.rpm	1b3f568bb764f5accc398145d5b3c4e9056b4808ad4e865acb928a042b666ce8	-	ol9_x86_64_appstream
	bind9.18-9.18.29-14.el9_8.8.src.rpm	1b3f568bb764f5accc398145d5b3c4e9056b4808ad4e865acb928a042b666ce8	-	ol9_x86_64_codeready_builder
	bind9.18-9.18.29-14.el9_8.8.x86_64.rpm	91d3d9cfefb4d3fdfc27ea914347f54e415910626f89d6014db83f3f26a99a13	-	ol9_x86_64_appstream
	bind9.18-chroot-9.18.29-14.el9_8.8.x86_64.rpm	25fe39b30b3757db13d9ec3cce4e9fef61db38e980fe81c07ad5f9f88c171c5e	-	ol9_x86_64_appstream
	bind9.18-devel-9.18.29-14.el9_8.8.i686.rpm	4d58db5d8a70b18152fcbb89c868a5c6c8348e873440d1e3c774afd58e04a4d1	-	ol9_x86_64_codeready_builder
	bind9.18-devel-9.18.29-14.el9_8.8.x86_64.rpm	0cfd1b594e9d24e302142387862b0c2312fde5e93672e5a09c237848b5907ec6	-	ol9_x86_64_codeready_builder
	bind9.18-dnssec-utils-9.18.29-14.el9_8.8.x86_64.rpm	ae73ccad9c99d7972d5cfe59203e13d78a7b08e093d1862a4fbc089acdae941b	-	ol9_x86_64_appstream
	bind9.18-doc-9.18.29-14.el9_8.8.noarch.rpm	436c28ccad3b4b8cdda98b99c181421e42b3fc48d78ed5ca5fba6c3192232f9a	-	ol9_x86_64_codeready_builder
	bind9.18-libs-9.18.29-14.el9_8.8.i686.rpm	0bb2d7dca52668d63404bc5fa7a11824eccfd12ff5e2b703a7dc4d2970dd0854	-	ol9_x86_64_codeready_builder
	bind9.18-libs-9.18.29-14.el9_8.8.x86_64.rpm	59820bf8558224e379355242568f4223964d33d36d3c02b62f6239fa9649671f	-	ol9_x86_64_appstream
	bind9.18-utils-9.18.29-14.el9_8.8.x86_64.rpm	73f0d47d682e0b4ba5951f3c360037ebb47959e9d2bdafffb6338f6e95cf4bb1	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team