ELSA-2026-89745

ELSA-2026-89745 - bind security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-10-26

Description

[9.16.23-40.0.1.el9_8.12]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.16.23-40.12]
- Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.

[32:9.16.23-40.11]
- Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913)

[32:9.16.23-40.10]
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)

[32:9.16.23-40.9]
- Add new root key 38696 into package files (RHEL-255763)
- Update built-in anchors in delv and named

[32:9.16.23-40.8]
- Fix NSEC3 signer validation (CVE-2026-10723)

[32:9.16.23-40.7]
- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names

[32:9.16.23-40.6]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)

[32:9.16.23-40.5]
- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
(CVE-2026-13204)

[32:9.16.23-40.4]
- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)

Related CVEs

CVE-2026-19662

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	bind-9.16.23-40.0.1.el9_8.12.src.rpm	7e574d12a9ef8a45df5054a1f74a4e8b4bfddfbb32296e035cfca1dae6761769	-	ol9_aarch64_appstream
	bind-9.16.23-40.0.1.el9_8.12.src.rpm	7e574d12a9ef8a45df5054a1f74a4e8b4bfddfbb32296e035cfca1dae6761769	-	ol9_aarch64_codeready_builder
	bind-9.16.23-40.0.1.el9_8.12.aarch64.rpm	305c50f8682ed275897dc6651d1eb01b9ebbd70dfe24c1968c57ae7ee293ff07	-	ol9_aarch64_appstream
	bind-chroot-9.16.23-40.0.1.el9_8.12.aarch64.rpm	cc40e0117874b03cb74810be54a71dec2cd48053f18e53205126b556b6570ea5	-	ol9_aarch64_appstream
	bind-devel-9.16.23-40.0.1.el9_8.12.aarch64.rpm	a23e6049530082c8f46454fc9588e83492fe81b707abe00372afa823f1e6d6b6	-	ol9_aarch64_codeready_builder
	bind-dnssec-doc-9.16.23-40.0.1.el9_8.12.noarch.rpm	ffed4e69ff11113d91f346663c46bc632af3ba668a841fafd470bf0cc74f74eb	-	ol9_aarch64_appstream
	bind-dnssec-utils-9.16.23-40.0.1.el9_8.12.aarch64.rpm	af2adb8d47ad61ba092ac99dba44b3b20d94a28b40b4ed3a950972b9cc622afb	-	ol9_aarch64_appstream
	bind-doc-9.16.23-40.0.1.el9_8.12.noarch.rpm	65dd4d6f200df07b49b9011bd11183d9a78c388be8604ecc93f7613a06f82e8f	-	ol9_aarch64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.12.aarch64.rpm	a30fc26fc1324431b0fe37c7343bb2cb4175fbabd1baca667781702e5c87c139	-	ol9_aarch64_appstream
	bind-license-9.16.23-40.0.1.el9_8.12.noarch.rpm	4231920e1c874e35ec26c9e4f348564f3f3759da52185a4202c88053df4aa91d	-	ol9_aarch64_appstream
	bind-utils-9.16.23-40.0.1.el9_8.12.aarch64.rpm	9c78c80cc34abb5e3cd3b714dcca9a3c96734f39eaf763d7fdb0f794e11595e7	-	ol9_aarch64_appstream
	python3-bind-9.16.23-40.0.1.el9_8.12.noarch.rpm	667c7df8e5dd9f79a53c40b83dbb9a340dd6364ddc55a177ce5452728c00d749	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	bind-9.16.23-40.0.1.el9_8.12.src.rpm	7e574d12a9ef8a45df5054a1f74a4e8b4bfddfbb32296e035cfca1dae6761769	-	ol9_x86_64_appstream
	bind-9.16.23-40.0.1.el9_8.12.src.rpm	7e574d12a9ef8a45df5054a1f74a4e8b4bfddfbb32296e035cfca1dae6761769	-	ol9_x86_64_codeready_builder
	bind-9.16.23-40.0.1.el9_8.12.x86_64.rpm	079043c243d6a1c7b1ca9d7c93dd408897cefef9b5fb1323dfae5790a69e635c	-	ol9_x86_64_appstream
	bind-chroot-9.16.23-40.0.1.el9_8.12.x86_64.rpm	fdf6b305433e7e019ead76920a60827f97684f0c3b9ad0844e3ddf7c997bf431	-	ol9_x86_64_appstream
	bind-devel-9.16.23-40.0.1.el9_8.12.i686.rpm	2ce9e41d31b8289b8daad6f056c48c233d90fc6500719bf73b1331dbba27bd46	-	ol9_x86_64_codeready_builder
	bind-devel-9.16.23-40.0.1.el9_8.12.x86_64.rpm	02fde44fbfb5860d555d68d3e052304e91379b86d83a74d275617bafaba580cb	-	ol9_x86_64_codeready_builder
	bind-dnssec-doc-9.16.23-40.0.1.el9_8.12.noarch.rpm	ffed4e69ff11113d91f346663c46bc632af3ba668a841fafd470bf0cc74f74eb	-	ol9_x86_64_appstream
	bind-dnssec-utils-9.16.23-40.0.1.el9_8.12.x86_64.rpm	cd5c1203f3c870ed67b3b9a10a709b961b811270f1876a9643a3c6bb80263ef8	-	ol9_x86_64_appstream
	bind-doc-9.16.23-40.0.1.el9_8.12.noarch.rpm	65dd4d6f200df07b49b9011bd11183d9a78c388be8604ecc93f7613a06f82e8f	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.12.i686.rpm	ea8bbda77d841827a11b9ca63482c9255eff72a851ad77adcb66c8e0cbadf43a	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.12.x86_64.rpm	8249e3ef491c9cb7ab0b85769ee2d0ea8a982625add0afb1f605b20f40a31dc7	-	ol9_x86_64_appstream
	bind-license-9.16.23-40.0.1.el9_8.12.noarch.rpm	4231920e1c874e35ec26c9e4f348564f3f3759da52185a4202c88053df4aa91d	-	ol9_x86_64_appstream
	bind-utils-9.16.23-40.0.1.el9_8.12.x86_64.rpm	0c9498edda5ab21c7552a7a6c660c8970f1b34546fc3321264a0c20b91675464	-	ol9_x86_64_appstream
	python3-bind-9.16.23-40.0.1.el9_8.12.noarch.rpm	667c7df8e5dd9f79a53c40b83dbb9a340dd6364ddc55a177ce5452728c00d749	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team