Skip to content
OpenAdvisories
High ELSA-2026-11371 1 CVE

Important: bind security update (Oracle Linux 7)

Published May 15, 2026 · Updated May 15, 2026

Ecosystem: Oracle Linux

Summary

[32:9.11.4-26.0.7.P2.16]
- Resolve CVE-2026-1519 [Orabug: 39275755]

[32:9.11.4-26.0.5.P2.16]
- Resolve CVE-2025-40778 [Orabug: 38699863]

[32:9.11.4-26.0.3.P2.16]
- Resolve CVE-2024-11187 [Orabug: 37616907]

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-chroot 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-devel 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-export-devel 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-export-libs 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-libs 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-libs-lite 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-license 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-lite-devel 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-pkcs11 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-pkcs11-devel 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-pkcs11-libs 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-pkcs11-utils 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-sdb 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-sdb-chroot 32:9.11.4-26.0.7.P2.el7_9.16
Oracle Linux · 7 bind-utils 32:9.11.4-26.0.7.P2.el7_9.16

Vulnerabilities 1

  • High 7.5
    CVE-2026-1519

    Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

    If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make re…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine