Skip to content
OpenAdvisories
High ELSA-2026-7915 1 CVE

Important: bind9.18 security update (Oracle Linux 9)

Published Apr 14, 2026 · Updated Apr 14, 2026

Ecosystem: Oracle Linux

Summary

[32:9.18.29-5.4]
- Correct backport issue in the patch (CVE-2026-1519)

[32:9.18.29-5.3]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 9 bind9.18 32:9.18.29-5.el9_7.4
Oracle Linux · 9 bind9.18-chroot 32:9.18.29-5.el9_7.4
Oracle Linux · 9 bind9.18-devel 32:9.18.29-5.el9_7.4
Oracle Linux · 9 bind9.18-dnssec-utils 32:9.18.29-5.el9_7.4
Oracle Linux · 9 bind9.18-doc 32:9.18.29-5.el9_7.4
Oracle Linux · 9 bind9.18-libs 32:9.18.29-5.el9_7.4
Oracle Linux · 9 bind9.18-utils 32:9.18.29-5.el9_7.4

Vulnerabilities 1

  • High 7.5
    CVE-2026-1519

    Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

    If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make re…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine