[CLSA-2026:1790090221] bind: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-22 15:17:18 UTC
Description:
- CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in query_find(), so query_addnoqnameproof() no longer dereferences the rdataset that query_filter64() had already returned to the message rdataset pool - CVE-2026-19667: reject negative cache records that do not fit in a dns_rdata_t; a record filling the 64 KiB assembly buffer exactly was stored with a 16-bit-truncated length of zero and every later reader of it aborted - CVE-2026-80274: record the denial type (NSEC or NSEC3) alongside the NOQNAME proof owner so that isc__rdatalist_addnoqname() caches and serves the same denial record the validator accepted
Updated packages:
  • bind-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:83802eef8f2ef3ed51d4487d48bccc7aff8afeef848c729a079591a3ee65196c
  • bind-chroot-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:75035929238d718cea1d8978d0e3523ce48faefbce88f4ea5de140bd431acf53
  • bind-devel-9.11.26-6.el8.tuxcare.els21.i686.rpm
    sha:32c3a83a01db0b8e13b6af9027a5467956eccf9c08e424ab864d5dc19f684861
  • bind-devel-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:adccbf97a5b9dc218000ff5af0b85c41de0508d020c88ed0d967638e052d43eb
  • bind-export-devel-9.11.26-6.el8.tuxcare.els21.i686.rpm
    sha:e058e0a269239866dd8b8c8d3e4d2d9bc4e5d74b74c21803e9b0b7b19271a75b
  • bind-export-devel-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:08a0f8d50683aa0b59018e883b260500c1c9828ff5fa01aadb4a863de71bec46
  • bind-export-libs-9.11.26-6.el8.tuxcare.els21.i686.rpm
    sha:d938e757008c9db98e31c4c979ccf73de781e8a61ab9531669a33ae8e243d0d6
  • bind-export-libs-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:13fb752175413141f935cf110364e8dbae89fb4c2bcc78f5a068afd8c62f2e44
  • bind-libs-9.11.26-6.el8.tuxcare.els21.i686.rpm
    sha:4fdec4fbb4c0cdaf9f3e4cd0fc773fc9ea786d0ba9f47fc56151ac9e56a46e0e
  • bind-libs-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:38593f0f0531c24f4e6785c9c0d53022c37999eb5c2cac5b04483897d98c00b2
  • bind-libs-lite-9.11.26-6.el8.tuxcare.els21.i686.rpm
    sha:5f65c30936fe9f60cdc06e09f85e7a3d46143f76cf07cf4d3dbcb3c3984559fa
  • bind-libs-lite-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:89b8d467e9381c377870f733259943810930f7fd6831d8489dd9c3c41101bc5b
  • bind-license-9.11.26-6.el8.tuxcare.els21.noarch.rpm
    sha:afd2b79e751ec983c50645b76d865e2ba9a60acf807898d462d1c410fc72a143
  • bind-lite-devel-9.11.26-6.el8.tuxcare.els21.i686.rpm
    sha:7d11f453cca3c61fd64e39e57cf6b72987bc3da92b730a492973292d0b12f13e
  • bind-lite-devel-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:a461336d1b3019420b653bce79a54cd4efb48bc01152154f1b36de432682210e
  • bind-pkcs11-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:1c9bc8b93bf5b29e9712fe8be699a6edcb551a3bcbe0806dee2e7930b6c96db8
  • bind-pkcs11-devel-9.11.26-6.el8.tuxcare.els21.i686.rpm
    sha:a719e0c362fff0ee1a56b67799f18c247d736867998d609af57ec7580a94025b
  • bind-pkcs11-devel-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:28f1fa358347feb68ea2bf7629b4e9d23dc110ba7062117f738ddb539a4c6d4b
  • bind-pkcs11-libs-9.11.26-6.el8.tuxcare.els21.i686.rpm
    sha:a161e5b5cc42d39910fe00097345d7ecc27e61c49ca20e3b042fee2358636b8c
  • bind-pkcs11-libs-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:8b73cd6ca6c7e9445b7f660872bfc71993560454f977e8cd1968f2109ec4505d
  • bind-pkcs11-utils-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:28568770232460c417630c1462ef259e66b672d3c3c624354ab6fb169cfd882f
  • bind-sdb-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:01453485e20eddc2d8ed3552724f22db8b6e76a721225c9099e05baa27ec1850
  • bind-sdb-chroot-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:e2986ea4ce0055be88f97d80ef89a11d0c9a0640ab0b827fd5cef83b754ba14a
  • bind-utils-9.11.26-6.el8.tuxcare.els21.x86_64.rpm
    sha:a92107f6a159f556b2c74f8a347c82a144bc7f44564b6a08986b65a878da47a0
  • python3-bind-9.11.26-6.el8.tuxcare.els21.noarch.rpm
    sha:d1051028f9b4cd7dbc36a0c6703eaaa40d29a96eebc6b2ed7ed0911e5b449a9f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.