Skip to content
OpenAdvisories
High ELSA-2026-8155 1 CVE

Important: bind9.16 security update (Oracle Linux 8)

Published Apr 14, 2026 · Updated Apr 14, 2026

Ecosystem: Oracle Linux

Summary

[32:9.16.23-0.22.5]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 8 bind9.16 32:9.16.23-0.22.el8_10.5
Oracle Linux · 8 bind9.16-chroot 32:9.16.23-0.22.el8_10.5
Oracle Linux · 8 bind9.16-devel 32:9.16.23-0.22.el8_10.5
Oracle Linux · 8 bind9.16-dnssec-utils 32:9.16.23-0.22.el8_10.5
Oracle Linux · 8 bind9.16-doc 32:9.16.23-0.22.el8_10.5
Oracle Linux · 8 bind9.16-libs 32:9.16.23-0.22.el8_10.5
Oracle Linux · 8 bind9.16-license 32:9.16.23-0.22.el8_10.5
Oracle Linux · 8 bind9.16-utils 32:9.16.23-0.22.el8_10.5
Oracle Linux · 8 python3-bind9.16 32:9.16.23-0.22.el8_10.5

Vulnerabilities 1

  • High 7.5
    CVE-2026-1519

    Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

    If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make re…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine