Skip to content
OpenAdvisories
High RHSA-2026:75767 3 CVEs

Red Hat Security Advisory: bind security update

Published Oct 6, 2026 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream bind 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-chroot 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-debuginfo 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-debugsource 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-dnssec-doc 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-dnssec-utils 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-dnssec-utils-debuginfo 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-libs 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-libs-debuginfo 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-license 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-utils 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-utils-debuginfo 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-bind 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::crb bind-debuginfo 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::crb bind-debugsource 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::crb bind-devel 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::crb bind-dnssec-utils-debuginfo 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::crb bind-doc 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::crb bind-libs 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::crb bind-libs-debuginfo 32:9.16.23-40.el9_8.10
Red Hat · RHEL 9 enterprise_linux:9::crb bind-utils-debuginfo 32:9.16.23-40.el9_8.10

Vulnerabilities 3

  • High 7.5
    CVE-2026-19666

    Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path

    On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.2…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-19667

    Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`

    If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue affects BIND 9 vers…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-80274

    Validating resolver can abort while caching a mismatched NOQNAME proof

    If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2535435
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2535466
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2535477
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75767.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-19666
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-19666
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-19666
  • article
    https://downloads.isc.org/isc/bind9/9.20.29
  • article
    https://downloads.isc.org/isc/bind9/9.21.26
  • article
    https://kb.isc.org/docs/cve-2026-19666
  • report
    https://access.redhat.com/security/cve/CVE-2026-19667
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-19667
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-19667
  • article
    https://kb.isc.org/docs/cve-2026-19667
  • report
    https://access.redhat.com/security/cve/CVE-2026-80274
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-80274
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-80274
  • article
    https://kb.isc.org/docs/cve-2026-80274