Summary
[9.18.33-10.0.2.el10_1.3]
- Hard require needed openssl-libs [Orabug: 38742109]
- Fix warning when changing device file permissions [Orabug: 36518580]
[32:9.18.33-10.3]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)
[32:9.18.33-10.2]
- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
[32:9.18.33-10.1]
- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | bind | 32:9.18.33-10.0.2.el10_1.3 |
| Oracle Linux · 10 | bind-chroot | 32:9.18.33-10.0.2.el10_1.3 |
| Oracle Linux · 10 | bind-devel | 32:9.18.33-10.0.2.el10_1.3 |
| Oracle Linux · 10 | bind-dnssec-utils | 32:9.18.33-10.0.2.el10_1.3 |
| Oracle Linux · 10 | bind-doc | 32:9.18.33-10.0.2.el10_1.3 |
| Oracle Linux · 10 | bind-libs | 32:9.18.33-10.0.2.el10_1.3 |
| Oracle Linux · 10 | bind-license | 32:9.18.33-10.0.2.el10_1.3 |
| Oracle Linux · 10 | bind-utils | 32:9.18.33-10.0.2.el10_1.3 |
Vulnerabilities 1
-
High 7.5
Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make re…