ELSA-2026-92419

ELSA-2026-92419 - bind security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-29

Description

[9.18.33-15.0.1.el10_2.14]
- Hard require needed openssl-libs [Orabug: 38742109]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.18.33-15.14]
- Prevent arbitrary code execution via GSS-TSIG UDP message replay
(CVE-2026-94300)
- Fix Denial of service via assertion failure in RPZ query processing (CVE-2026-97313)
- Prevent Denial of Service via assertion failure during redirect processing
(CVE-2026-96888)
- Prevent Denial of Service via unbounded processing of crafted DNS messages
(CVE-2026-19630)

Related CVEs

CVE-2026-19630

CVE-2026-94300

CVE-2026-96888

CVE-2026-97313

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	bind-9.18.33-15.0.1.el10_2.14.src.rpm	dffca927052adc8b4e52ad0e805f9094553b7919a128ee8f3fd898c32b8fb4d7	-	ol10_aarch64_appstream
	bind-9.18.33-15.0.1.el10_2.14.src.rpm	dffca927052adc8b4e52ad0e805f9094553b7919a128ee8f3fd898c32b8fb4d7	-	ol10_aarch64_codeready_builder
	bind-9.18.33-15.0.1.el10_2.14.aarch64.rpm	91a7f3198514a0a8e9c8b7262e5e3c33e0534c3c31f4ed2232dc7866442db7ef	-	ol10_aarch64_appstream
	bind-chroot-9.18.33-15.0.1.el10_2.14.aarch64.rpm	829f9da8a053a47ea2f8a776b33007e4cdc612159c357a725f4b9f38e3a39b14	-	ol10_aarch64_appstream
	bind-devel-9.18.33-15.0.1.el10_2.14.aarch64.rpm	7d4779a72fb7746558997bb13f0ae010438b3b5b385ad704fda885813386e74c	-	ol10_aarch64_codeready_builder
	bind-dnssec-utils-9.18.33-15.0.1.el10_2.14.aarch64.rpm	16135f76bb2cd12b8b00dc0dfb33dd52203f40d9167db01323ae60229e62940f	-	ol10_aarch64_appstream
	bind-doc-9.18.33-15.0.1.el10_2.14.noarch.rpm	bcd903debe061b5cd0904b90d746e40e5f9f802a06ca9c115863d742c491e8c2	-	ol10_aarch64_codeready_builder
	bind-libs-9.18.33-15.0.1.el10_2.14.aarch64.rpm	65d699bb94dc660155bc9d2fb2f91fd6c131eecc1e1b709dd22dffca23a224f2	-	ol10_aarch64_appstream
	bind-license-9.18.33-15.0.1.el10_2.14.noarch.rpm	8f851d04620c7614a2182156b549b67d9a35baaaa2c15eec30bf55658c63273e	-	ol10_aarch64_appstream
	bind-utils-9.18.33-15.0.1.el10_2.14.aarch64.rpm	1e0ec16553cae72f0be1033d748b952beec53bf49bce842c48adc19a0dee9702	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	bind-9.18.33-15.0.1.el10_2.14.src.rpm	dffca927052adc8b4e52ad0e805f9094553b7919a128ee8f3fd898c32b8fb4d7	-	ol10_x86_64_appstream
	bind-9.18.33-15.0.1.el10_2.14.src.rpm	dffca927052adc8b4e52ad0e805f9094553b7919a128ee8f3fd898c32b8fb4d7	-	ol10_x86_64_codeready_builder
	bind-9.18.33-15.0.1.el10_2.14.x86_64.rpm	c163d0a7414542787fd0a02bb8268553536bcc543d7bbdb57ced732f88652a60	-	ol10_x86_64_appstream
	bind-chroot-9.18.33-15.0.1.el10_2.14.x86_64.rpm	c5f3e61c2937e5521bf499d0f88588190cc52398ab4c0f8a46fb3874e297fede	-	ol10_x86_64_appstream
	bind-devel-9.18.33-15.0.1.el10_2.14.x86_64.rpm	04fa99d07d6cbf0e6ee1148f28a0641a164745f4df0da302db978cd74c84875b	-	ol10_x86_64_codeready_builder
	bind-dnssec-utils-9.18.33-15.0.1.el10_2.14.x86_64.rpm	8c9cb158681d7416d7dcc06fe9b11c5d8f4819aec8ffe7ac27ee8e3f636fc9f4	-	ol10_x86_64_appstream
	bind-doc-9.18.33-15.0.1.el10_2.14.noarch.rpm	bcd903debe061b5cd0904b90d746e40e5f9f802a06ca9c115863d742c491e8c2	-	ol10_x86_64_codeready_builder
	bind-libs-9.18.33-15.0.1.el10_2.14.x86_64.rpm	b4d3848042d63ad2bf3c9e65df34ae728cdbe6d3d62e0ac108b739619c73b415	-	ol10_x86_64_appstream
	bind-license-9.18.33-15.0.1.el10_2.14.noarch.rpm	8f851d04620c7614a2182156b549b67d9a35baaaa2c15eec30bf55658c63273e	-	ol10_x86_64_appstream
	bind-utils-9.18.33-15.0.1.el10_2.14.x86_64.rpm	7ccb93be9b308e0b53e6c45b1141b5550fc57070737863ccdda7db5a2aab6253	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team