ELSA-2026-75578

ELSA-2026-75578 - bind9.18 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-05

Description

[32:9.18.29-14.10]
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)
- Set limit to following HTTPS/SVCB aliases (CVE-2026-81736)

[32:9.18.29-14.9]
- Add new root key 38696 into package files (RHEL-255223)
- Update built-in anchors in delv and named

Related CVEs

CVE-2026-19666

CVE-2026-19667

CVE-2026-80274

CVE-2026-81563

CVE-2026-81736

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	bind9.18-9.18.29-14.el9_8.10.src.rpm	ce1696180c1a9d0c3bbf12ec7530ea114bd1cf1302be3fa0e068b2bcd6ebe065	-	ol9_aarch64_appstream
	bind9.18-9.18.29-14.el9_8.10.src.rpm	ce1696180c1a9d0c3bbf12ec7530ea114bd1cf1302be3fa0e068b2bcd6ebe065	-	ol9_aarch64_codeready_builder
	bind9.18-9.18.29-14.el9_8.10.aarch64.rpm	15b23fa657d440891b8c377266dcfe2febace14d9a697c9db4b9c5dcec3f6c0b	-	ol9_aarch64_appstream
	bind9.18-chroot-9.18.29-14.el9_8.10.aarch64.rpm	cc78349a197e209316ce4799829720766325b161f7ee301decaa69ab813058db	-	ol9_aarch64_appstream
	bind9.18-devel-9.18.29-14.el9_8.10.aarch64.rpm	b01d93820a6724d2c24ae0db534b88e8176424d53ca28d3528f29a1c0e8f03e6	-	ol9_aarch64_codeready_builder
	bind9.18-dnssec-utils-9.18.29-14.el9_8.10.aarch64.rpm	d641519df37c30d949ddc8eb094bcfcd1db57286f368f0d0ad94d75efb68d9fa	-	ol9_aarch64_appstream
	bind9.18-doc-9.18.29-14.el9_8.10.noarch.rpm	fd4b05ebbf0db945160ce8dada683d2e03a96d41d790eb79ff6e62bdd6bbee1e	-	ol9_aarch64_codeready_builder
	bind9.18-libs-9.18.29-14.el9_8.10.aarch64.rpm	2e83a0ea48987d3b41493f39906a0f0617bb484e71da052b90d81fb96efd0f48	-	ol9_aarch64_appstream
	bind9.18-utils-9.18.29-14.el9_8.10.aarch64.rpm	f5b28b6d637d32d0d537b3bdf9b3e5dd1db5105083be7ff31fd903e8e3beba1e	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	bind9.18-9.18.29-14.el9_8.10.src.rpm	ce1696180c1a9d0c3bbf12ec7530ea114bd1cf1302be3fa0e068b2bcd6ebe065	-	ol9_x86_64_appstream
	bind9.18-9.18.29-14.el9_8.10.src.rpm	ce1696180c1a9d0c3bbf12ec7530ea114bd1cf1302be3fa0e068b2bcd6ebe065	-	ol9_x86_64_codeready_builder
	bind9.18-9.18.29-14.el9_8.10.x86_64.rpm	66fbb459f926186e0ccd631a2e54b204bcf0735df51a5ee51c1760d553d5b6f6	-	ol9_x86_64_appstream
	bind9.18-chroot-9.18.29-14.el9_8.10.x86_64.rpm	70c7641b8217d761c1d6957477c32b090f715474b4ea10243834ae23e21fcfb3	-	ol9_x86_64_appstream
	bind9.18-devel-9.18.29-14.el9_8.10.i686.rpm	6d11210fb927d4b8a489c5981f630d70940e796aa4891f63dc28869f13cff81c	-	ol9_x86_64_codeready_builder
	bind9.18-devel-9.18.29-14.el9_8.10.x86_64.rpm	22ef8028f8cae4099c286265bcd8592035416a5658e73ed7c3ff4e9c34c0d820	-	ol9_x86_64_codeready_builder
	bind9.18-dnssec-utils-9.18.29-14.el9_8.10.x86_64.rpm	aa35d491a40b06520dd59a17fb2de63b65a908d3f12b0d1ba926cda1ef12175f	-	ol9_x86_64_appstream
	bind9.18-doc-9.18.29-14.el9_8.10.noarch.rpm	fd4b05ebbf0db945160ce8dada683d2e03a96d41d790eb79ff6e62bdd6bbee1e	-	ol9_x86_64_codeready_builder
	bind9.18-libs-9.18.29-14.el9_8.10.i686.rpm	37c579ef2933f7bd1380dda5b87a38b19c86e92870f6d78d4f2208665ab4e510	-	ol9_x86_64_codeready_builder
	bind9.18-libs-9.18.29-14.el9_8.10.x86_64.rpm	d38848feeab1e9cb101ba3e19b6c4c60118a985b1e603d2acd9fd807d025cfb2	-	ol9_x86_64_appstream
	bind9.18-utils-9.18.29-14.el9_8.10.x86_64.rpm	bf10bf100ec787f261c0c9aebc34d33cc3ea043edfaabe93599635b31068c601	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team