Summary
[9.16.23-40.0.1.el9_8.12]
- Fix warning when changing device file permissions [Orabug: 36518580]
[32:9.16.23-40.12]
- Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.
[32:9.16.23-40.11]
- Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913)
[32:9.16.23-40.10]
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)
[32:9.16.23-40.9]
- Add new root key 38696 into package files (RHEL-255763)
- Update built-in anchors in delv and named
[32:9.16.23-40.8]
- Fix NSEC3 signer validation (CVE-2026-10723)
[32:9.16.23-40.7]
- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names
[32:9.16.23-40.6]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)
[32:9.16.23-40.5]
- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
(CVE-2026-13204)
[32:9.16.23-40.4]
- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | bind | 32:9.16.23-40.0.1.el9_8.12 |
| Oracle Linux · 9 | bind-chroot | 32:9.16.23-40.0.1.el9_8.12 |
| Oracle Linux · 9 | bind-devel | 32:9.16.23-40.0.1.el9_8.12 |
| Oracle Linux · 9 | bind-dnssec-doc | 32:9.16.23-40.0.1.el9_8.12 |
| Oracle Linux · 9 | bind-dnssec-utils | 32:9.16.23-40.0.1.el9_8.12 |
| Oracle Linux · 9 | bind-doc | 32:9.16.23-40.0.1.el9_8.12 |
| Oracle Linux · 9 | bind-libs | 32:9.16.23-40.0.1.el9_8.12 |
| Oracle Linux · 9 | bind-license | 32:9.16.23-40.0.1.el9_8.12 |
| Oracle Linux · 9 | bind-utils | 32:9.16.23-40.0.1.el9_8.12 |
| Oracle Linux · 9 | python3-bind | 32:9.16.23-40.0.1.el9_8.12 |
Vulnerabilities 1
-
Medium 5.9
qpcache NOQNAME proof use-after-free crashes recursive resolver
An attacker may be able to cause a `named` resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server under the control of the attacker. If the auth responds with a p…