[CLSA-2026:1790326860] bind: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-25 09:01:15 UTC
Description:
- CVE-2026-19666: clear the aliased noqname pointer in query_addanswer() on the DNS64 filter64 path before the rdataset is returned to the message pool - CVE-2026-19667: reject negative cache records that do not fit in a dns_rdata_t, and report a repeated singleton or a second SOA RRset as DNS_R_TOOMANYRECORDS - CVE-2026-80274: record the accepted denial type with the rdataset so that dns_rdataset_addnoqname() and dns_rdataset_getnoqname() select the same NSEC/NSEC3 and RRSIG pair
CVEs fixed:
Updated packages:
  • bind-9.16.23-11.el9_2.2.tuxcare.els15.aarch64.rpm
    sha:7e8f9da57d0e7d8a536c4498bc23c955570d5676a34b447a381a0a412040f6a1
  • bind-9.16.23-11.el9_2.2.tuxcare.els15.i686.rpm
    sha:f525531a4055bb0667e7a5c7153debfaa623940d62fcc194b8a6e3955e3d783c
  • bind-9.16.23-11.el9_2.2.tuxcare.els15.x86_64.rpm
    sha:7cc566a963f325d9f9767b73988683b40895d2db94701365e5038ed7216d9cb0
  • bind-chroot-9.16.23-11.el9_2.2.tuxcare.els15.aarch64.rpm
    sha:86570f1080d73001f132b5d80c1730841c23fa678d92cf003fae1e304d704f24
  • bind-chroot-9.16.23-11.el9_2.2.tuxcare.els15.i686.rpm
    sha:6eb11c8c7ebf89aaff247313d7e7072f99d78e0cace31746b757de39f83d2fe0
  • bind-chroot-9.16.23-11.el9_2.2.tuxcare.els15.x86_64.rpm
    sha:3fda5827badb8ff73cae2d13721ec9f030abbb54367878bcad119066d52195e2
  • bind-devel-9.16.23-11.el9_2.2.tuxcare.els15.aarch64.rpm
    sha:099c15edead74075d82d032e1eef673a557bdbc9405f72458591f787ebb89905
  • bind-devel-9.16.23-11.el9_2.2.tuxcare.els15.i686.rpm
    sha:8389e2fad514f22e37893086aa5fc9cdbab9a3cf7697178f91997385dac40c31
  • bind-devel-9.16.23-11.el9_2.2.tuxcare.els15.x86_64.rpm
    sha:baeec6a73753a06086af9466a40946e483358bdf067f9153350f28d54c327455
  • bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els15.noarch.rpm
    sha:0852fbec5b550b5d20c2b3b25709709287612f2fba29b8b939d269a837122e0b
  • bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els15.aarch64.rpm
    sha:97ad0c4985d485c61b386b089d87d79c430278daa831baeb6d28de936df18822
  • bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els15.i686.rpm
    sha:d219727fd6c65df59a913a12166f23caebfb0c873734387470c93a38ef96bf8d
  • bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els15.x86_64.rpm
    sha:ca2735e2ef4ae0600b78b435fa6ada582ce2e2bbc27f93fc0c24538c239c2fa2
  • bind-doc-9.16.23-11.el9_2.2.tuxcare.els15.noarch.rpm
    sha:314bb6a40df450e29f61fb5fcdf588a783d62996e7da658a354f34dab8a6d797
  • bind-libs-9.16.23-11.el9_2.2.tuxcare.els15.aarch64.rpm
    sha:a6084c363f7b1408603e4c43b1296b3fd358db298e8ad6df73c5b215a878e3fb
  • bind-libs-9.16.23-11.el9_2.2.tuxcare.els15.i686.rpm
    sha:674d9e226609e285fbc9d355ebb68678727ded4604799842205eb9fe663c146c
  • bind-libs-9.16.23-11.el9_2.2.tuxcare.els15.x86_64.rpm
    sha:4bcf17908c1c163c95ab76d928562cefc2a506e2facd6e824aa7e9c88b671064
  • bind-license-9.16.23-11.el9_2.2.tuxcare.els15.noarch.rpm
    sha:5cf9ee77a04c0a15f1bdbdeeef2f9e891075ccd1003ead64716f7aa1d75e43a8
  • bind-utils-9.16.23-11.el9_2.2.tuxcare.els15.aarch64.rpm
    sha:b1bc879e00c6e5ef042a035a54ebe312e404a324859c73cef346a1f2c18b2aca
  • bind-utils-9.16.23-11.el9_2.2.tuxcare.els15.i686.rpm
    sha:5a7f8abd05c387f9c9ef110d2e79dcf837662e06605d94f878b0a3b5738180a7
  • bind-utils-9.16.23-11.el9_2.2.tuxcare.els15.x86_64.rpm
    sha:f07617e89642e5ec426e491f48429322a308c2212c55d8bcbe93b759dc832f70
  • python3-bind-9.16.23-11.el9_2.2.tuxcare.els15.noarch.rpm
    sha:277c1842ecc344115c60fabf525774a7a8caf87406e0717af2560d867bfe2719
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.