ELSA-2026-79113

ELSA-2026-79113 - bind9.16 security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-08

Description

[32:9.16.23-0.22-16]
- Backport 'Do not use header_prev in expire_lru_headers' from upstream.

[32:9.16.23-0.22-15]
- Reenable unit tests during build

[32:9.16.23-0.22.14]
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)

Related CVEs

CVE-2026-19666

CVE-2026-19667

CVE-2026-80274

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	bind9.16-9.16.23-0.22.el8_10.16.src.rpm	ed4188891c6b804d1bb71b10e84e90a0644f45fdfd41610b04379f68747dcd3d	-	ol8_aarch64_appstream
	bind9.16-9.16.23-0.22.el8_10.16.src.rpm	ed4188891c6b804d1bb71b10e84e90a0644f45fdfd41610b04379f68747dcd3d	-	ol8_aarch64_codeready_builder
	bind9.16-9.16.23-0.22.el8_10.16.aarch64.rpm	7c1766210600855b94ba165e85a62a7a3132858f0681732acdf2722cad079087	-	ol8_aarch64_appstream
	bind9.16-chroot-9.16.23-0.22.el8_10.16.aarch64.rpm	9e70197ea3695f37d5f1bce2ff084673de58d5b219f0879cc5c958fbaffa5236	-	ol8_aarch64_appstream
	bind9.16-devel-9.16.23-0.22.el8_10.16.aarch64.rpm	95f51bd1bb299d1d9c6aeee9df5a51c96c47398b7fb3bf35d1f82b527d4cea1d	-	ol8_aarch64_codeready_builder
	bind9.16-dnssec-utils-9.16.23-0.22.el8_10.16.aarch64.rpm	a45a43bcc2917d908fa1c7bd8a994ace26056738093316b4cee682e6cd359960	-	ol8_aarch64_appstream
	bind9.16-doc-9.16.23-0.22.el8_10.16.noarch.rpm	5fb3f8013d92fcca58325133cbb6169112e20c42400aa1e3a74c843d9612c541	-	ol8_aarch64_codeready_builder
	bind9.16-libs-9.16.23-0.22.el8_10.16.aarch64.rpm	d15cb04e73ed732f7750422172cb97ca1fd98f68b57c32085d6599144214a934	-	ol8_aarch64_appstream
	bind9.16-license-9.16.23-0.22.el8_10.16.noarch.rpm	13ceb4e4dab28e94c37d4c38690fd6b9dde77b20538b5b15f4bf97eb8c7e3186	-	ol8_aarch64_appstream
	bind9.16-utils-9.16.23-0.22.el8_10.16.aarch64.rpm	78e09603762cbb2796d222c7e4656e9c51a72b78cca0ffc011ec6b254b4eb51c	-	ol8_aarch64_appstream
	python3-bind9.16-9.16.23-0.22.el8_10.16.noarch.rpm	4be0ec69cac4556c4e7c39ef7b8df7b84087d655688ab8cc97e106f8a6f1ecfa	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	bind9.16-9.16.23-0.22.el8_10.16.src.rpm	ed4188891c6b804d1bb71b10e84e90a0644f45fdfd41610b04379f68747dcd3d	-	ol8_x86_64_appstream
	bind9.16-9.16.23-0.22.el8_10.16.src.rpm	ed4188891c6b804d1bb71b10e84e90a0644f45fdfd41610b04379f68747dcd3d	-	ol8_x86_64_codeready_builder
	bind9.16-9.16.23-0.22.el8_10.16.x86_64.rpm	545efd51e239cc40351efc0c0bb138af2bd3e3bb804c3d732e08096058f66d0e	-	ol8_x86_64_appstream
	bind9.16-chroot-9.16.23-0.22.el8_10.16.x86_64.rpm	394a30ce42fc67c7ed18a8fdf9d5bd04be44f3046d51073332a4f38c5c6329de	-	ol8_x86_64_appstream
	bind9.16-devel-9.16.23-0.22.el8_10.16.i686.rpm	206377a8359a2e924536eb1bf85a5fd067bdc085e23025ffc8621a6ecd60f151	-	ol8_x86_64_codeready_builder
	bind9.16-devel-9.16.23-0.22.el8_10.16.x86_64.rpm	28bb2683d79d9a2fdf8b353b1e33a8b8d4b521a670550ecead3624caa3310532	-	ol8_x86_64_codeready_builder
	bind9.16-dnssec-utils-9.16.23-0.22.el8_10.16.x86_64.rpm	60c49cbd139dff6ebf329828b363972371229c397bbf6f05a0518ca55192d7a4	-	ol8_x86_64_appstream
	bind9.16-doc-9.16.23-0.22.el8_10.16.noarch.rpm	5fb3f8013d92fcca58325133cbb6169112e20c42400aa1e3a74c843d9612c541	-	ol8_x86_64_codeready_builder
	bind9.16-libs-9.16.23-0.22.el8_10.16.i686.rpm	89175941ce50eff86c4bfbf16629df9547dc2881a77725337e93c1bc8925eac3	-	ol8_x86_64_codeready_builder
	bind9.16-libs-9.16.23-0.22.el8_10.16.x86_64.rpm	97373f31ba03288e42d32e7c8c53bdc4f899e5edb610e6f6dd14005158adbf86	-	ol8_x86_64_appstream
	bind9.16-license-9.16.23-0.22.el8_10.16.noarch.rpm	13ceb4e4dab28e94c37d4c38690fd6b9dde77b20538b5b15f4bf97eb8c7e3186	-	ol8_x86_64_appstream
	bind9.16-utils-9.16.23-0.22.el8_10.16.x86_64.rpm	6fcd00391f3c37529a3a0cc069fbee123d818ab2d360c18b5c8b59d0095f526e	-	ol8_x86_64_appstream
	python3-bind9.16-9.16.23-0.22.el8_10.16.noarch.rpm	4be0ec69cac4556c4e7c39ef7b8df7b84087d655688ab8cc97e106f8a6f1ecfa	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team