[CLSA-2026:1793163086] bind: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-28 04:51:38 UTC
Description:
- CVE-2026-11721: reject RRSIGs whose labels field is smaller than the signer name or larger than the owner name (forged wildcard records, cache poisoning) - CVE-2026-10723: require NSEC3 records to be signed by the zone exactly one label above their owner name (forged NXDOMAIN proofs) - CVE-2026-94300: serialize access to the shared GSS-TSIG security context (memory corruption on concurrent or replayed GSS-TSIG traffic) - CVE-2026-19630: bound how many compression pointers a name and a message may make named follow (CPU exhaustion on crafted messages) - CVE-2026-11622: keep the cache header that owns NOQNAME and closest encloser proofs referenced while the proofs are in use (use-after-free)
CVEs fixed:
Updated packages:
  • bind-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:9c71bd783d1ab0f9748e287828b1ab8d912ca4938a3dfa080edc69e0da5dea11
  • bind-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:cbf239fe68e3007183fbb3d952b1085e7d7c21f8944804c9ef6dd82602f53466
  • bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:f3bb7d5ea71d1b69f6b29bc4e96895789cd9a8a0f7601f6d6c5ca38ca9fc8e59
  • bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:e00e4b7755cac2bd69d9af92ea073ece733b235aa9e6af6e3c2c8d938e2f61e2
  • bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:3b77a2957ac6dbe6764754e0358c16d062d79e71ba834879bac5484824345769
  • bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:d1070f2cb63ee74f1e777d5f11e2ce96e396b60952debc1f2877d42ff205f41d
  • bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:8d62dc1d07be822b6212becf86b0f7c3efde82b683af75913cccba715e195e3d
  • bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:26381a05271e211f4edd322b2bcc943dcfb4af6793d7b094eb4ed66d4600446c
  • bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:d003b952a7b0a8c1739353f99fca1870278ea1d632d4dbb7f0ecddeceb6a6967
  • bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:84141cdaddb89d65dcb66eef7080fa26b05ea22b8242b005a8d25103684f8713
  • bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:52e263a268786fd25779a8c2ed39383e845ae57fca18c4c0c190f3b014b73be7
  • bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:341d233f74291f5568e4e87adee967c71024510dc2f504e6b365eb05094331da
  • bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:82d44f06fcab5d170bab57205c18727520fbc6975aebc1654bcb75312718c6bb
  • bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:377dd1f2739c6de5070a22026b9ae41ca354a3a3fa23cb89dddf73a1adba6ae8
  • bind-license-9.11.4-26.P2.el7_9.16.tuxcare.els20.noarch.rpm
    sha:423e3ac121b85d68db664db5d1e763a23ea4fa7ba2cbb4b2f141185cc05ed2ff
  • bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:33a4736476b9b7ddc91eb4f4897425ccc8309cd556d544b6b31612b5e0f80df5
  • bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:d66812a572f6dd6faedab8203c741ba9cd6aafdd5de18c2ff56f7f9d7f62da9f
  • bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:64556d0bead25a935c3df3f372ecb44a39e7866444177b840705f2d90204cd8c
  • bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:9bf86d98206101c8b53b99991b9111e90cbaba366e2b52d8c20e0d713e0e93be
  • bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:4dbeb2c5e6db12d8d39c9ba9f2770b90cdb3052a27e327bbf14153fc2e9add79
  • bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:8e1937feb53139fca7813c7838bc6aaa121e05aa6c795a881d7f358bb615875b
  • bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:9a6426bb48d565dcb76e2292ec14f5cee8ac77089e7a71471ec5e8589c139dd7
  • bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:4d5f00289ee86b4af5fca3bdd4f5c12b808c1a062a1b3a3922354c4689bd462e
  • bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:a481765a80bc7950abf8bb3e4c05ce5a05aabb2e30b28bfb88de13b2d0bc4c4e
  • bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:c56a3497500eb537ef61467baeb551bd75fd8bc2190afacaf4c7b2638d4f6699
  • bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:8c9081763b541f05727a7ca770a8d4947020ff9c37a4616845e812825c7cb3d6
  • bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:c7842b574085cee36b74e51bb26acc8cd151525655d1ca9ffbac32f7d89c8268
  • bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:fba327d41a6a54ab4cfcc7a4928e50ad4d36622276816bcb5fb0f85e1a8bec34
  • bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:44d2f67ad053cd466e9bcf940805114417ea097ccaa4de4d92df148afce53b24
  • bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els20.i686.rpm
    sha:e16b9f9ee9d1258087a901fd6306db00a334b548d68393c26cca64f41afa9fea
  • bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els20.x86_64.rpm
    sha:972873e8535bd1ba575d59b9aeb55360e9f64372f04cf9990ea539edd4f3e284
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.