Skip to content
OpenAdvisories
High ELSA-2026-8352 1 CVE

Important: bind security update (Oracle Linux 8)

Published Apr 15, 2026 · Updated Apr 15, 2026

Ecosystem: Oracle Linux

Summary

[32:9.11.36-16.7]
- Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)

Fixed packages 17

ReleasePackageFixed in
Oracle Linux · 8 bind 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-chroot 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-devel 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-export-devel 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-export-libs 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-libs 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-libs-lite 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-license 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-lite-devel 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-pkcs11 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-pkcs11-devel 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-pkcs11-libs 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-pkcs11-utils 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-sdb 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-sdb-chroot 32:9.11.36-16.el8_10.7
Oracle Linux · 8 bind-utils 32:9.11.36-16.el8_10.7
Oracle Linux · 8 python3-bind 32:9.11.36-16.el8_10.7

Vulnerabilities 1

  • High 7.5
    CVE-2026-1519

    Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

    If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make re…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine