[CLSA-2026:1790328589] bind: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-25 09:30:04 UTC
Description:
- CVE-2026-19666: clear the aliased noqname pointer in query_addanswer() on the DNS64 filter64 path before the rdataset is returned to the message pool - CVE-2026-19667: reject negative cache records that do not fit in a dns_rdata_t, and report a repeated singleton or a second SOA RRset as DNS_R_TOOMANYRECORDS - CVE-2026-80274: record the accepted denial type with the rdataset so that dns_rdataset_addnoqname() and dns_rdataset_getnoqname() select the same NSEC/NSEC3 and RRSIG pair
CVEs fixed:
Updated packages:
  • bind-9.16.23-31.el9_6.2.tuxcare.els6.aarch64.rpm
    sha:3f15a76d256507b54b4422366273912f0a346173e4cb125a118efb78d8a74b85
  • bind-9.16.23-31.el9_6.2.tuxcare.els6.i686.rpm
    sha:d95c2141ad657d57ff858178479d7f60b4ab60312a8511b7b8cdd41d177be39a
  • bind-9.16.23-31.el9_6.2.tuxcare.els6.x86_64.rpm
    sha:1f07c138232ddc30f63e97f765b2b9a50a006a765e870c07a7a2f7db2adb1f1f
  • bind-chroot-9.16.23-31.el9_6.2.tuxcare.els6.aarch64.rpm
    sha:61ad557294501b421858f3cbe131466448a47bfebd1cb42f328f450f24b4af83
  • bind-chroot-9.16.23-31.el9_6.2.tuxcare.els6.i686.rpm
    sha:380dcec275d58aaa44a663ac8bd3ba690438d2f8732f8fbe391a113156f22ab8
  • bind-chroot-9.16.23-31.el9_6.2.tuxcare.els6.x86_64.rpm
    sha:2e5aa1bf9e5e1105e647178f21f0df922b1147c88b39cec9b47af1cc7d293271
  • bind-devel-9.16.23-31.el9_6.2.tuxcare.els6.aarch64.rpm
    sha:1b77fa84f6e7bcdf30b0d453274f850d0ada21ff9e25ed13fbfac454557051a0
  • bind-devel-9.16.23-31.el9_6.2.tuxcare.els6.i686.rpm
    sha:58731df298cf92ca765a2f62c43bb985ec2a26670299989a127fa05e5997d866
  • bind-devel-9.16.23-31.el9_6.2.tuxcare.els6.x86_64.rpm
    sha:e0f644c66db71d9700b6e57cbf93beb726ebeef07f4aa6389153ffc237ccfc14
  • bind-dnssec-doc-9.16.23-31.el9_6.2.tuxcare.els6.noarch.rpm
    sha:aa6c630669a9ba17de760582c10851bea373e07ce006be91141f863a01fef0b5
  • bind-dnssec-utils-9.16.23-31.el9_6.2.tuxcare.els6.aarch64.rpm
    sha:f4c038bb8d199fc1f81365c072c61cb23b65ec469acc9011b2c59b0308392ae5
  • bind-dnssec-utils-9.16.23-31.el9_6.2.tuxcare.els6.i686.rpm
    sha:84979a5e6fa83095f46299dbaa9f1e7962ade0eb9e81477034a3af3c08f5fde9
  • bind-dnssec-utils-9.16.23-31.el9_6.2.tuxcare.els6.x86_64.rpm
    sha:f5e6b3f43b0a4fab2b4fce3f5ef8f2d65c833f22bfa38637bd09035a3f99381e
  • bind-doc-9.16.23-31.el9_6.2.tuxcare.els6.noarch.rpm
    sha:722a4b81db90a473c29622585929efb69fee1b05e6fb3d742f7454d1e5de0519
  • bind-libs-9.16.23-31.el9_6.2.tuxcare.els6.aarch64.rpm
    sha:43f6ccc435e1499b595d689e8e53c48e265593b996b5d403a740aefbf31b5ba2
  • bind-libs-9.16.23-31.el9_6.2.tuxcare.els6.i686.rpm
    sha:62b7ad3354dd9d290d3caba8de60fc6ade2031949deb18cb3afed4f246f037dd
  • bind-libs-9.16.23-31.el9_6.2.tuxcare.els6.x86_64.rpm
    sha:50c50a090dfdc39df0504b47e1342aa7a0d54c4e8e01324ab16d4fa537c2c16d
  • bind-license-9.16.23-31.el9_6.2.tuxcare.els6.noarch.rpm
    sha:33b091f16f19255a68dc4895e612b29ce302c92521cdbe6c0a9f70129d100c50
  • bind-utils-9.16.23-31.el9_6.2.tuxcare.els6.aarch64.rpm
    sha:517a228d4eac7b53e610a4c6b5188f0024fe4ea26e000ce04d370e88e3a67fa5
  • bind-utils-9.16.23-31.el9_6.2.tuxcare.els6.i686.rpm
    sha:d559e802b5ddb931856c6bd9786d670f1676e4bc46f3f0bb9d14af6a51b867fb
  • bind-utils-9.16.23-31.el9_6.2.tuxcare.els6.x86_64.rpm
    sha:596e29e88e4d1d3b19ca84b8f2cf87b77dafd31f7ef58c9febd144e850ae1e00
  • python3-bind-9.16.23-31.el9_6.2.tuxcare.els6.noarch.rpm
    sha:25bd5f29412008a1a8504e7118ddfdf99d41a0a010c96ea4a9b8757f4ee72c02
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.