[CLSA-2026:1792588358] bind: Fix of 3 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-10-21 13:12:51 UTC
Description:
- CVE-2026-19033: require a TSIG on every message of an incoming zone transfer and drop support for sparsely signed transfers - CVE-2026-19662: keep the owning cache header referenced while a NOQNAME or closest-encloser proof rdataset still points into its data - CVE-2026-19668: bound the DS-to-DNSKEY matching and RRSIG verification work done while validating a DNSKEY RRset
CVEs fixed:
Updated packages:
  • bind-9.16.23-11.el9_2.2.tuxcare.els16.aarch64.rpm
    sha:8bdce62cc759fd633dbe229acdb4fd7141e81c079b2879a26283680ca25219d5
  • bind-9.16.23-11.el9_2.2.tuxcare.els16.i686.rpm
    sha:8acfe7dfefd97f931af3a0a8973af8bc3a047ddc9bbaddd9f54a9446473f268c
  • bind-9.16.23-11.el9_2.2.tuxcare.els16.x86_64.rpm
    sha:11e709873adc0b1c6886fdcdecb82724811aa3fecd68921fedbbb8f3ad1a4e13
  • bind-chroot-9.16.23-11.el9_2.2.tuxcare.els16.aarch64.rpm
    sha:ec403f0a282f9e3971b6eadc562e58a5b4640df0746ea9897d9a14e164c3ee53
  • bind-chroot-9.16.23-11.el9_2.2.tuxcare.els16.i686.rpm
    sha:9a0d81ab3bacc8cc917aafed1769f137316996ac3800c920bdbc2e3f8b51a636
  • bind-chroot-9.16.23-11.el9_2.2.tuxcare.els16.x86_64.rpm
    sha:ed6087762bc9fa7ce5c28e0052169d005f5f9151798405b8697b26e94131244b
  • bind-devel-9.16.23-11.el9_2.2.tuxcare.els16.aarch64.rpm
    sha:5eaf5c4af69029fcdef57b3faf7dc100ee6958d0208107ef2aec9cd1fd079f1d
  • bind-devel-9.16.23-11.el9_2.2.tuxcare.els16.i686.rpm
    sha:e6b8a15b35d1a8d5bda9a368d70bff731ae0a61a8519e3edc310887cf8803d80
  • bind-devel-9.16.23-11.el9_2.2.tuxcare.els16.x86_64.rpm
    sha:2aa18a001d6b86b55ddfe7d7465051252212d693d2c9af6851960cf3002378d1
  • bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els16.noarch.rpm
    sha:7b9a83f8ebf8f068afb8d38435f1b98c65ffa2cc361aacce304f91f121a11a2f
  • bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els16.aarch64.rpm
    sha:720a770a00aadd8a2f110225ab43755d3b4015b8f918af98e4a768066c921282
  • bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els16.i686.rpm
    sha:5a4af81d0cab06ee4ae05fa9d7ce94a61d90ab21e98e795a1276e55cd7c33a64
  • bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els16.x86_64.rpm
    sha:1afa7f9f2823e9b0a75d28b3d5835cd0c39b7168c69fc70dcd802bee49e992c3
  • bind-doc-9.16.23-11.el9_2.2.tuxcare.els16.noarch.rpm
    sha:8c2c8e9334b4b0457d987096adef775ab9a63e9604fc2aa37c879a20ab4678e3
  • bind-libs-9.16.23-11.el9_2.2.tuxcare.els16.aarch64.rpm
    sha:d4a2ffd3ac9263c5be21d29673feedcdad7f3c01fe944b5a833ad307d5e6dc23
  • bind-libs-9.16.23-11.el9_2.2.tuxcare.els16.i686.rpm
    sha:e8b9139f771f998361c9d529588e10a07911d4a0d516604436ac6b529a76912f
  • bind-libs-9.16.23-11.el9_2.2.tuxcare.els16.x86_64.rpm
    sha:db03a27ec98a51bfcdeb7eed65ec1ef551f5a3fb9a4f842d984275e0e09b537a
  • bind-license-9.16.23-11.el9_2.2.tuxcare.els16.noarch.rpm
    sha:6145bad180df7701d47b7efe3d5b580c2ae310606733b08e28b8b935410052f4
  • bind-utils-9.16.23-11.el9_2.2.tuxcare.els16.aarch64.rpm
    sha:042b9beb61156bd8947e4037c2ff08ea0070b772c9e85042240e391a7e46bbcc
  • bind-utils-9.16.23-11.el9_2.2.tuxcare.els16.i686.rpm
    sha:a607d18de7c9dcc56ab2cb8d54002630fe07eb5ee2e85d9a79ebb7361df9b062
  • bind-utils-9.16.23-11.el9_2.2.tuxcare.els16.x86_64.rpm
    sha:bfa137c93258ad701ba7627934e14d6fb696cb7bacea7b575f76b95a63afb39f
  • python3-bind-9.16.23-11.el9_2.2.tuxcare.els16.noarch.rpm
    sha:d79c03be788ba03cb28f8a85807a476a16e7dda1b89c8a1399a4012e8f46ccf6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.