[CLSA-2026:1793163099] bind: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-28 10:43:47 UTC
Description:
- CVE-2026-11721: reject RRSIGs whose labels field is smaller than the signer name or larger than the owner name (forged wildcard records, cache poisoning) - CVE-2026-10723: require NSEC3 records to be signed by the zone exactly one label above their owner name (forged NXDOMAIN proofs) - CVE-2026-94300: serialize access to the shared GSS-TSIG security context (memory corruption on concurrent or replayed GSS-TSIG traffic) - CVE-2026-19630: bound how many compression pointers a name and a message may make named follow (CPU exhaustion on crafted messages) - CVE-2026-11622: keep the cache header that owns NOQNAME and closest encloser proofs referenced while the proofs are in use (use-after-free)
CVEs fixed:
Updated packages:
  • bind-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:e9012621dc85cc72663f6ca838941bfc3515c433954c9c3b51919919821a810d
  • bind-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:789379fe79d501d05fbb7ce1a90da31ca54bda4569a634f87f722a522feb2f3b
  • bind-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:b3f7618ee04702c62a6b86afca78904bb6f44f7dc4e6e22e8863fc1cc8caa82d
  • bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:650a9c23d563a9443b2040f788ba386392a256ecefe26e827dfaf04d4b763720
  • bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:b0ee44fd2fabd1ad50c93368cccd4b201abaab1c20e75aa96319a100c191aa70
  • bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:824f2d48ada78d2518aec92caf3525668748133800a6767845450e30c2707c7e
  • bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:6eb68566dfc22fe05b8bfd6da372595d39028826df44139aecf13e3cb857259d
  • bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:453a270482cccaac38f75fb8224d1c86a417a2354e066e7502c3172dcaa03337
  • bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:08ff847592aabfbb5c4161a4bb287350faad8b6fe157911a0b79e3fa389dcc8a
  • bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:b16dab2f9e25e3e4e92e0dfca466dc2a13f6260c60990390697f70ca5766180d
  • bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:cdd37d5863c84b5c9391e906dde257f4c4bbd7f223f306c26920f51bbff44d7c
  • bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:a494010249c540e82ae765c87ed8db76458ed8718d6995cf5990ff2fb8cabee0
  • bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:1ab920bb94cdb01a2a89acf11f34d2a45415266f8585f3c4b84368d51aec25b4
  • bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:60acc0c51afb3abb284f7a5b60988d00666f0131e19cc9f882f7186535697973
  • bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:116d3a72ede20326a5ef327a571573edd4c64ee402be1b30be8c46617637892a
  • bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:018c902fd86bd5034009009bb7d048e3ec90e1970fda377a0545322c12655430
  • bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:82afcc68613e0abe0a82c46af3dacab538c604c12b24af6cb36272c03e89d5a8
  • bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:9a8ab29297c4843deaffe8dea47327fd4f72d7a13f8c58a71d1b8ac4cb4ae530
  • bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:c1a431c3c74851ff2b52bf4e7d5a38e1598d6f9508c27e373878f684e7b7e366
  • bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:99d405c738e45ced16724c049096f4d8a289cc50a628967a584fcee85d554b0d
  • bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:7e15f2f3d087adecec35e4f313769027ba60df2104cabef2a1d0e78865418533
  • bind-license-9.11.4-26.P2.el7_9.16.tuxcare.els20.noarch.rpm
    sha:1501464a029d4c0a7f0c6c36918f6bd6c1c36fb92a4a6eb266ea77096a61cfd4
  • bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:18e6802292d7e7535d7aa621a088f9a6be189dc99b6a8baf26773f54fd4bed04
  • bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:26d9e3f7b30b234c4942df6ac9ba2f3b9ab30444ab250d80a1f994c1cea7830b
  • bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:71c35f90683490dd87833a7e72fc9d02359a0b9b314b9226a197a273848ba332
  • bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:e74e9087145795d1c371ed10e568e1ba3ff995b75bf1ad8ff0979f4f448a1881
  • bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:248326da93d94c863a994f6476350b379b4e14ffa6a54a264fdc5c88e26c7ff6
  • bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:2fd14f6060b207b0d5708d02023ea820274b762f6cc2a53108be1450c37a9196
  • bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:f10834e69d6db1c262d1e53063a10fcd6cf4a9b83df462b64eca61dda8e8fdf8
  • bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:df00dec87b648a1fe2a594a3f108b94957e8b67c6bb9be0455a60b2f65f32a6a
  • bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:dd4b8244466f87b7771889a30c95af6dd43ef331c443a40e140f2211bd83bb63
  • bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:a4df5d6ce6b169bf522654ac9e463777a5b04d545303c478e9f7b7c2fc2ac95f
  • bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:3763b64ac96481da2e97f952fa21ae61a1bc3da6d57154bceef637d43f3976b2
  • bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:fc7ae9097d7485d07701e02d79293de017cc9b89cd82819d0c1cf08f92f0e254
  • bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:190e4536dc76ba92bdf24a1628915a9c5d3604a8e943225d9106fafd5071c61b
  • bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:41b17af68051606eb1fe278d8fbadbd75f66e17e77978674cbca5f0fcece4def
  • bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:f51e57df94712129212f3bbdc5370b5bdae5636b0d6a437d8102c79c70c86eb4
  • bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:26ef090bb9fd19b22dba19221987846772d73e0dbffcac045ca369ad31b0f037
  • bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:70b245da274d80db79773b60db5e3e7cb4ae4ab45947507e37d29ff2f3004622
  • bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:7fddeacd5cf4bc89b957a7a767069920f9c8aa5a9a65e7a836d541bc5c979cdd
  • bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:3ccbee6b3a24c7af7cf0c3b44a7694bc69ffcc7066c958162da0734838fd0127
  • bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:f8a5621a042968a1d345b406e67d7b46117d8c38968b65d6ec2f1253f0fc631a
  • bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:de4c0490da12cdf606ba69ec7f4f3599d7928bbd88b56a330db9adce7713562a
  • bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els20.aarch64.rpm
    sha:643d17b14b017ebc553cfc1909c1cf1ea6eba1aa3434a0b298ee64caf7bb7ea9
  • bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:dc6c193411717d16079a71511bc18477da441746d26e728d75c0497902237885
  • bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:9b0a2d7e784c73f1f63ecb011203614f91262f32fbd58378ed55d6009e112e3a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.