Summary
[9.16.23-34.0.1.el9_7.2]
- Fix warning when changing device file permissions [Orabug: 36518580]
[32:9.16.23-34.2]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)
[32:9.16.23-34.1]
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
- Replace downstream fixes with upstream changes
- Address various spoofing attacks (CVE-2025-40778)
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | bind | 32:9.16.23-34.0.1.el9_7.2 |
| Oracle Linux · 9 | bind-chroot | 32:9.16.23-34.0.1.el9_7.2 |
| Oracle Linux · 9 | bind-devel | 32:9.16.23-34.0.1.el9_7.2 |
| Oracle Linux · 9 | bind-dnssec-doc | 32:9.16.23-34.0.1.el9_7.2 |
| Oracle Linux · 9 | bind-dnssec-utils | 32:9.16.23-34.0.1.el9_7.2 |
| Oracle Linux · 9 | bind-doc | 32:9.16.23-34.0.1.el9_7.2 |
| Oracle Linux · 9 | bind-libs | 32:9.16.23-34.0.1.el9_7.2 |
| Oracle Linux · 9 | bind-license | 32:9.16.23-34.0.1.el9_7.2 |
| Oracle Linux · 9 | bind-utils | 32:9.16.23-34.0.1.el9_7.2 |
| Oracle Linux · 9 | python3-bind | 32:9.16.23-34.0.1.el9_7.2 |
Vulnerabilities 1
-
High 7.5
Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make re…