[CLSA-2026:1793202580] bind: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-28 18:15:26 UTC
Description:
- CVE-2026-11721: reject RRSIGs whose labels field is smaller than the signer name or larger than the owner name (forged wildcard records, cache poisoning) - CVE-2026-10723: require NSEC3 records to be signed by the zone exactly one label above their owner name (forged NXDOMAIN proofs) - CVE-2026-94300: serialize access to the shared GSS-TSIG security context (memory corruption on concurrent or replayed GSS-TSIG traffic) - CVE-2026-19630: bound how many compression pointers a name and a message may make named follow (CPU exhaustion on crafted messages) - CVE-2026-11622: keep the cache header that owns NOQNAME and closest encloser proofs referenced while the proofs are in use (use-after-free)
CVEs fixed:
Updated packages:
  • bind-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:da5514782999f7c85ae1f60d6ebe4f1e9f92e7eac429f797df28f91b06d941ad
  • bind-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:2437eacc8ca8eaf7a550d2dcbe9e7e6ffe090b40de6fb00152e1a905245b46c3
  • bind-chroot-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:a612ee624cd94733a45091adb2f326b0516883ce59c714141de8818741f1879a
  • bind-chroot-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:b575ca1d353048375aa1ebf6fe2b3ba10c256f9bcb0d78b46dd2499e66028603
  • bind-devel-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:7ae830fb1efc72affe4db2a5e329070936544734b28fb4efda70b66ab89c562f
  • bind-devel-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:52601bac81714a920bf8a9bdf0eb287fa140c66b4bbc13b5fd9c1a6461efc0b7
  • bind-export-devel-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:322f2f96b4273be2b652222abe778d110b9ff2d4de1ba5c11ccdab677757a75c
  • bind-export-devel-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:4359062a7dccab666a8f6905db1b03ffd673cbccc657d3af0a96f3e31aae14ad
  • bind-export-libs-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:12884e80ca6a1732de56541825b845d9e5bec2d00badc328f9832621a32c38a7
  • bind-export-libs-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:184891424a28047b7265a729a241392d7210a6de30e626ac3c938dde22b2df60
  • bind-libs-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:302e8e1b6094f0904f6b525ad4bf8eaef4dc157ce64f510b0f449705031b2cf1
  • bind-libs-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:b7935d4010b915015e30bee425fc755d985bfd906ecd299b7576d53d704a3e70
  • bind-libs-lite-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:478859a7c1846f7bf3e3c23050b4f04ebc4c94a0319c1241d7a1f6de0b3660d0
  • bind-libs-lite-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:81f97a4e233ff5ff457d2f913efdb1cb19040ba2195f1b5f432c815448ac8fca
  • bind-license-9.11.4-26.P2.el7.16.tuxcare.els20.noarch.rpm
    sha:b42877f116c2811c24aea0c843e5a4aa1fce15410eeca1517327e0f88d669f52
  • bind-lite-devel-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:349709ae857aae4016c79a1a7ee46d0dd6bf35c3ef08289d25e1123abd9034d6
  • bind-lite-devel-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:7fbceed1e8099a57332cd76098bc4245373ea8736b9f40577847b43f6d4d5ed8
  • bind-pkcs11-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:2850731483ecd3397c439e028c2e77aebd67701af3b76526ba48f203f363b71f
  • bind-pkcs11-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:05fbba0d5b9ed10cfefd7b24715fc9ffbd8e61be0bd61c590551e071c9ba35d4
  • bind-pkcs11-devel-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:dc6ea795f870a803ac3c755f676cd3b1cc315943c0c52e12e01cf7dc9c9d7709
  • bind-pkcs11-devel-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:1a3df546b097279ba889e93dbbae61ab315e64cb43139574b54397b779fd7f3c
  • bind-pkcs11-libs-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:42554d97f17ef5adf95451ca1605336084952ef1c76137be90bebaef2ffae92c
  • bind-pkcs11-libs-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:6d845f60d1accffcad628ec183b18e796c9421ba2781948c3acebbaabf36a111
  • bind-pkcs11-utils-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:67f6420fc11818e335bf881012041cdbc1b4fb8b04a05660f9ae9c856cb8b489
  • bind-pkcs11-utils-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:48401e963d8ea959a54b2c7dfe675f07f79ff10920792dc75c8db6ee008769e5
  • bind-sdb-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:95c6bf04a7ca534c991719053604031017171c91dac712d9acea37dd1c488e94
  • bind-sdb-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:c7df66f0ba13af7105f092b80c40a47a2c21cbecf887a4433d0cde88ac52f635
  • bind-sdb-chroot-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:d8dbe0ac1033292509a92836c5e1d1bd5afe81e8e409858c2b6fb2efb9ea9ba7
  • bind-sdb-chroot-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:d16ae397af3658154803216300f67f03c849d8d0ef189882175971d81977d8e1
  • bind-utils-9.11.4-26.P2.el7.16.tuxcare.els20.i686.rpm
    sha:d4ad375b07cedb9400e2897922010c98e75b6af35249d7cdd97b7ac6cbe036b4
  • bind-utils-9.11.4-26.P2.el7.16.tuxcare.els20.x86_64.rpm
    sha:3714b1bd50ec28be5f670085ffa1fe71f6216a57fbdeca7d30894721406a3379
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.