ELSA-2026-93610

ELSA-2026-93610 - bind security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-02

Description

[9.16.23-40.0.1.el9_8.13]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.16.23-40.13]
- Fix CVE-2026-94300: Arbitrary code execution via GSS-TSIG UDP message replay.
- Fix CVE-2026-97313: Denial of Service via assertion failure in RPZ query processing.
- Fix CVE-2026-96888: Denial of Service via assertion failure during redirect processing.
- Fix CVE-2026-19630: Denial of Service via unbounded processing of crafted DNS messages.

[32:9.16.23-40.12]
- Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.

[32:9.16.23-40.11]
- Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913)

[32:9.16.23-40.10]
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)

[32:9.16.23-40.9]
- Add new root key 38696 into package files (RHEL-255763)
- Update built-in anchors in delv and named

[32:9.16.23-40.8]
- Fix NSEC3 signer validation (CVE-2026-10723)

[32:9.16.23-40.7]
- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names

[32:9.16.23-40.6]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)

[32:9.16.23-40.5]
- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
(CVE-2026-13204)

Related CVEs

CVE-2026-19630

CVE-2026-94300

CVE-2026-96888

CVE-2026-97313

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	bind-9.16.23-40.0.1.el9_8.13.src.rpm	97da3493b2701e99f338e6624f5b1f28430b68d2e7ebcbd6237b65ed668d50cd	-	ol9_aarch64_appstream
	bind-9.16.23-40.0.1.el9_8.13.src.rpm	97da3493b2701e99f338e6624f5b1f28430b68d2e7ebcbd6237b65ed668d50cd	-	ol9_aarch64_codeready_builder
	bind-9.16.23-40.0.1.el9_8.13.aarch64.rpm	43ce6beceef331aea0f501c3636e865fba6630cbd435589bc50fc94d01418d54	-	ol9_aarch64_appstream
	bind-chroot-9.16.23-40.0.1.el9_8.13.aarch64.rpm	9e671c0f358c346f75cf40ca3f3c4efaba563d9a398a545f99cc9b66fe7f5074	-	ol9_aarch64_appstream
	bind-devel-9.16.23-40.0.1.el9_8.13.aarch64.rpm	2c10de253cfa0475337d0ac5e37e04746716c3491e27cecc4771f925c7a2f4fa	-	ol9_aarch64_codeready_builder
	bind-dnssec-doc-9.16.23-40.0.1.el9_8.13.noarch.rpm	231a9bc538f23659d63254ce8848d89055fc6d229a8e54fba7477d633e4484e1	-	ol9_aarch64_appstream
	bind-dnssec-utils-9.16.23-40.0.1.el9_8.13.aarch64.rpm	decacfaa08ebfc7d198e88ec64e7559c764fd46dadcd8295ea9d48d3a6ccf8f3	-	ol9_aarch64_appstream
	bind-doc-9.16.23-40.0.1.el9_8.13.noarch.rpm	ab690838dbe9e73f5b9584b92026eb6626a1b530b8369b88afe18fabf0729dff	-	ol9_aarch64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.13.aarch64.rpm	6780a2b1881f2e976da4e8d219ab7c62c0dd159d760041530ffc3916f850a08c	-	ol9_aarch64_appstream
	bind-license-9.16.23-40.0.1.el9_8.13.noarch.rpm	ad6d5540df6759dcfefc39e3b17a2d39a9ff96e7d412dd75b82ab27c454fd89c	-	ol9_aarch64_appstream
	bind-utils-9.16.23-40.0.1.el9_8.13.aarch64.rpm	4de608bd0747d9f0960ac6748f85527b3828425692dfdefcc5f894b90f535a98	-	ol9_aarch64_appstream
	python3-bind-9.16.23-40.0.1.el9_8.13.noarch.rpm	771f57269c3a76bf6463d979c153fc669154898909809c5672947e5fac31f742	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	bind-9.16.23-40.0.1.el9_8.13.src.rpm	97da3493b2701e99f338e6624f5b1f28430b68d2e7ebcbd6237b65ed668d50cd	-	ol9_x86_64_appstream
	bind-9.16.23-40.0.1.el9_8.13.src.rpm	97da3493b2701e99f338e6624f5b1f28430b68d2e7ebcbd6237b65ed668d50cd	-	ol9_x86_64_codeready_builder
	bind-9.16.23-40.0.1.el9_8.13.x86_64.rpm	1ddca51aef9e87c1bdf6f371ffb107be6db79824cc603fc970ea3c93e23ce969	-	ol9_x86_64_appstream
	bind-chroot-9.16.23-40.0.1.el9_8.13.x86_64.rpm	980859b062496782e6245354d040e179c9f8d0a71d71dc602624781294387b31	-	ol9_x86_64_appstream
	bind-devel-9.16.23-40.0.1.el9_8.13.i686.rpm	4f0f5eb22bfcef8abd3b8c4acbab3369c7827753217ebaac39de2ff89d5dcfd6	-	ol9_x86_64_codeready_builder
	bind-devel-9.16.23-40.0.1.el9_8.13.x86_64.rpm	ac2401db9442bb5d677f409ebf100da9a007466b01d5156541426bf68d7e429a	-	ol9_x86_64_codeready_builder
	bind-dnssec-doc-9.16.23-40.0.1.el9_8.13.noarch.rpm	231a9bc538f23659d63254ce8848d89055fc6d229a8e54fba7477d633e4484e1	-	ol9_x86_64_appstream
	bind-dnssec-utils-9.16.23-40.0.1.el9_8.13.x86_64.rpm	d418cf78987fd6d81a2e65f687d633b02b5ef82d70167054d39d9326410f64b7	-	ol9_x86_64_appstream
	bind-doc-9.16.23-40.0.1.el9_8.13.noarch.rpm	ab690838dbe9e73f5b9584b92026eb6626a1b530b8369b88afe18fabf0729dff	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.13.i686.rpm	229f9efddb57c7c86db323c8b87ac6a863128615ed95c61a0dad82368e4b454f	-	ol9_x86_64_codeready_builder
	bind-libs-9.16.23-40.0.1.el9_8.13.x86_64.rpm	4dfd5b003862cc30c1e3d7817ea7f7062a9a4fb661091e6813320d741d12e7f0	-	ol9_x86_64_appstream
	bind-license-9.16.23-40.0.1.el9_8.13.noarch.rpm	ad6d5540df6759dcfefc39e3b17a2d39a9ff96e7d412dd75b82ab27c454fd89c	-	ol9_x86_64_appstream
	bind-utils-9.16.23-40.0.1.el9_8.13.x86_64.rpm	032c9c7f985548f73f9fd44ac6dcf145df6c9a051bc1fb01ee184e77478ad2df	-	ol9_x86_64_appstream
	python3-bind-9.16.23-40.0.1.el9_8.13.noarch.rpm	771f57269c3a76bf6463d979c153fc669154898909809c5672947e5fac31f742	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team