ELSA-2026-75767

ELSA-2026-75767 - bind security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-05

Description

[9.16.23-40.0.1.el9_8.10]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.16.23-40.10]
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)

[32:9.16.23-40.9]
- Add new root key 38696 into package files (RHEL-255763)
- Update built-in anchors in delv and named

[32:9.16.23-40.8]
- Fix NSEC3 signer validation (CVE-2026-10723)

[32:9.16.23-40.7]
- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names

[32:9.16.23-40.6]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)

[32:9.16.23-40.5]
- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
(CVE-2026-13204)

[32:9.16.23-40.4]
- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)

[32:9.16.23-40.3]
- Prevent cache memory exhaustion under sustained attack
(CVE-2026-11622, RHEL-213397)

[32:9.16.23-40.2]
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

Related CVEs

CVE-2026-19666

CVE-2026-19667

CVE-2026-80274

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	bind-9.16.23-40.0.1.el9_8.10.src.rpm	523f93b977dde02493d5ba9aac86927c4510aa9265a3bc57c84010d08995604a	-	ol9_aarch64_appstream
	bind-9.16.23-40.0.1.el9_8.10.src.rpm	523f93b977dde02493d5ba9aac86927c4510aa9265a3bc57c84010d08995604a	-	ol9_aarch64_codeready_builder
	bind-9.16.23-40.0.1.el9_8.10.aarch64.rpm	7868ea6b06d01eac4d26a73225427198920521be7a62d99e5e2324169393c178	-	ol9_aarch64_appstream
	bind-chroot-9.16.23-40.0.1.el9_8.10.aarch64.rpm	1e9870520d884fa97a4f0802e18ef6ca72128001cab62fd2821b5ceb65a85439	-	ol9_aarch64_appstream
	bind-devel-9.16.23-40.0.1.el9_8.10.aarch64.rpm	eb0a8fd1cf83f8cd1145e712a636a0bc190779e87cdd19d54633f873cbd15b54	-	ol9_aarch64_codeready_builder
	bind-dnssec-doc-9.16.23-40.0.1.el9_8.10.noarch.rpm	e3aab9ab8c4be2dc11ae104cc7c2d0c2b0e48e34c0117c489c73860b7c2864aa	-	ol9_aarch64_appstream
	bind-dnssec-utils-9.16.23-40.0.1.el9_8.10.aarch64.rpm	cad902f044146dbee2ad439106aecb03d43ff0110735120ebe7a52e6134946d5	-	ol9_aarch64_appstream
	bind-doc-9.16.23-40.0.1.el9_8.10.noarch.rpm	fb5418f405e53e3259497ac12f92ce123db42402e410befea5b79bbbd2ea8240	-	ol9_aarch64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.10.aarch64.rpm	18eae0bd779ca9167ead033cb1291eca00346053a6c48912ca3313002eacde2a	-	ol9_aarch64_appstream
	bind-license-9.16.23-40.0.1.el9_8.10.noarch.rpm	a5221a3e04f0ad23f90692e58707aa64f1d3772c439436c97ee6283f1ba76e63	-	ol9_aarch64_appstream
	bind-utils-9.16.23-40.0.1.el9_8.10.aarch64.rpm	c877367fec566e42273d665b92cb83547654ffac26d82f5677db4a4205dcdea1	-	ol9_aarch64_appstream
	python3-bind-9.16.23-40.0.1.el9_8.10.noarch.rpm	06ffe976927451b7b3375fa82180cc413ee0d1227dcc3a90015bb8de5d55a179	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	bind-9.16.23-40.0.1.el9_8.10.src.rpm	523f93b977dde02493d5ba9aac86927c4510aa9265a3bc57c84010d08995604a	-	ol9_x86_64_appstream
	bind-9.16.23-40.0.1.el9_8.10.src.rpm	523f93b977dde02493d5ba9aac86927c4510aa9265a3bc57c84010d08995604a	-	ol9_x86_64_codeready_builder
	bind-9.16.23-40.0.1.el9_8.10.x86_64.rpm	67a2aedb38538407b6d7322ba8df9e7c286350c8dfb3f53bee5018aa80e861dd	-	ol9_x86_64_appstream
	bind-chroot-9.16.23-40.0.1.el9_8.10.x86_64.rpm	a90ed2a7c7ee617edb3fa061f95764f908f7f6cb1aa0c88c0cf6db597ec6d44c	-	ol9_x86_64_appstream
	bind-devel-9.16.23-40.0.1.el9_8.10.i686.rpm	22333057df52d3559dce306dc2b0892adb10224c86e2c4276af01ceef181cf8c	-	ol9_x86_64_codeready_builder
	bind-devel-9.16.23-40.0.1.el9_8.10.x86_64.rpm	c40e7216331bec549f76673de634bc5b8d456e744b698f3a9978d6c805b13629	-	ol9_x86_64_codeready_builder
	bind-dnssec-doc-9.16.23-40.0.1.el9_8.10.noarch.rpm	e3aab9ab8c4be2dc11ae104cc7c2d0c2b0e48e34c0117c489c73860b7c2864aa	-	ol9_x86_64_appstream
	bind-dnssec-utils-9.16.23-40.0.1.el9_8.10.x86_64.rpm	10185e3a49dcb25ac372477a057aa82193cd88ac34e9f4d97e52896f15c4a979	-	ol9_x86_64_appstream
	bind-doc-9.16.23-40.0.1.el9_8.10.noarch.rpm	fb5418f405e53e3259497ac12f92ce123db42402e410befea5b79bbbd2ea8240	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.10.i686.rpm	85d911967e5fbe84a220438c20c84f49b0ae7f542cae5eb4e1dbdfa92f45b84c	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.10.x86_64.rpm	7a43d6395251a71a9b92701f5ba1fe343c9324ab8975de55b816c0ec05c9c836	-	ol9_x86_64_appstream
	bind-license-9.16.23-40.0.1.el9_8.10.noarch.rpm	a5221a3e04f0ad23f90692e58707aa64f1d3772c439436c97ee6283f1ba76e63	-	ol9_x86_64_appstream
	bind-utils-9.16.23-40.0.1.el9_8.10.x86_64.rpm	ef16594f4ba64f78b82576ec4cd6f1edeb85c1200e6f113ef125ef141276cd87	-	ol9_x86_64_appstream
	python3-bind-9.16.23-40.0.1.el9_8.10.noarch.rpm	06ffe976927451b7b3375fa82180cc413ee0d1227dcc3a90015bb8de5d55a179	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team