[CLSA-2026:1793094489] bind: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-27 09:48:25 UTC
Description:
- CVE-2026-13321: reject validly-signed NSEC records whose Next Domain Name points outside the signer's zone, preventing cross-zone DNSSEC cache poisoning - CVE-2026-19666: fix an assertion failure in a resolver using "dns64" with "break-dnssec yes", where a partially excluded AAAA RRset cached with a NOQNAME proof left the proof aliased to an rdataset the filter64 path had already returned to the message pool - CVE-2026-19667: upstream hardening backported for parity - reject a negative cache record that does not fit in a dns_rdata_t - CVE-2026-80274: fix an assertion failure in a validating resolver when a wildcard answer carries a signed NSEC3 proof and an unsigned NSEC (or a signed NSEC and an unsigned NSEC3) at the same owner name
CVEs fixed:
Updated packages:
  • bind-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:c91d875ad3c4db6edbf3a480a926eb10205506e2f95b6d7b5ea8a78fef19287c
  • bind-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:4a86f68550a0a869a521ce7e3281039a56d68d3e148bfb5c9d265ea78bee714b
  • bind-chroot-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:c437bb406394688dccbc471686590c69663a5698da7fb57fef3b29a53426aa1f
  • bind-chroot-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:b2ea080e50277b6377c8c2efe1176c774ea01e904a50e100814e85d621989e31
  • bind-devel-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:2a8026464114f652c5e3701c642d3d03d86469fc2c8252e50597d8b79729f1c1
  • bind-devel-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:46ac82200cf8ffa23e114d89660aca9d950e573b3910a80dfe720af7cac1f78c
  • bind-export-devel-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:3dc94e9e86b4100e3547559ba32b356b57aac183ba29de1cf67a2b9465c93dcc
  • bind-export-devel-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:4e1e06f646b662b306ba3fda1e73da0f21033920afcb54fb93a5f8a7f1deb600
  • bind-export-libs-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:59c5bc71261ba2336473cfe2873fd7d7120e64996c1496d8525d5350c9086858
  • bind-export-libs-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:3b6469de0b0bff9413ec5b59e78bdcfa77875374d3c8edac1a6064b6443a3cf6
  • bind-libs-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:5ca8dd3967b958b66458b5e436d6546b65f6a3dea2be18da7403c35ba42d4175
  • bind-libs-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:6e68ef96261763f9e033cbd14b38176f2efa28bd9974e232bae116db9e7a9dc3
  • bind-libs-lite-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:6b65140fcb7ea94701bcec8493273939eeaafe67e3c14f92c11a8d4038f096c8
  • bind-libs-lite-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:a87e1bd0581687b7981edae52428c879b82cb74417bad33b168fef118e27f522
  • bind-license-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.noarch.rpm
    sha:bfadd2167b7e1164c868df128d54b536988647b4c87eedd837d593f289e78f08
  • bind-lite-devel-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:42394300657c9ac97c7e0daee38ca62969427ad5bb6aeaef71a2748fe499cdba
  • bind-lite-devel-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:a2b46bccc0462f048d6541a91ac9e153c006baf821a9a5a662fa8c75e5cea320
  • bind-pkcs11-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:cd7da47fc8ccf60c0c31a6e1ab041a0fa4c6861382704196194cd196e72da943
  • bind-pkcs11-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:10e9084592847072032fd85b9b72bd59a56e607d2cc63e06380401e528b488af
  • bind-pkcs11-devel-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:f3b8349b7353a460f51601c6a577b8060f1c7c74dde26b034813b780ebfa3bae
  • bind-pkcs11-devel-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:134d9a301648791b0752c82e1d50d10c36912173ea1072bdf0b0503c33c966bf
  • bind-pkcs11-libs-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:bcad0c34196f51b18d609272413cf80ba37242cd7543e49ab500a6e4636a7669
  • bind-pkcs11-libs-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:d57523e293faf2ae88793eed3de456fe811850bb643abef5fc81484a0cd7bae9
  • bind-pkcs11-utils-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:2d7cf0d4755d118ef94a10d0364f2d6782ae44092387345f9351b1bfaf8b1943
  • bind-pkcs11-utils-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:fe00d25e1fc6d5486a242e9f94ae175a2296c0735de1b35cce7d3512c5e0b7c9
  • bind-sdb-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:81e67e171305c0ed770c79cfbb05274c06ec48a4c38fc89f7983d95a68beff94
  • bind-sdb-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:ccc83f1ef6449c46d9face3a4dd07c238a028956de03936b49ec0e3a7ffcc156
  • bind-sdb-chroot-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:de2fba234fbdb0a5c925cd6435e1160c84dd4e42c42b75f4060cdb61b18b70c7
  • bind-sdb-chroot-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:f73559f26f46c786293277e9fc977c47696d2a2e88289093823a814c4990fdbd
  • bind-utils-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.i686.rpm
    sha:5b76441f940c79e89bbef62320b1fce8d8d77b83b4ead71b4a1cdfd2113f324b
  • bind-utils-9.11.4-26.0.7.P2.el7_9.16.tuxcare.els3.x86_64.rpm
    sha:fa0222aa3aa467ab64ff2ac68ffa742a31b909759729b470448ab17b4b2ad1fe
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.