ALSA-2026:89746: Moderate: bind9.18 security update

Q: Which systems are most directly exposed to this issue?

Systems running the BIND named DNS server from the affected AlmaLinux bind9.18 packages are the most directly exposed, because the issue is a denial of service through crafted DNSSEC responses. The listed update also covers related chroot, library, utility, development, documentation, and DNSSEC utility packages.

Q: What does an attacker need to exploit the vulnerability?

The available information identifies crafted DNSSEC responses as the trigger. It does not specify network position, authentication requirements, or other prerequisites.

Q: How can I determine whether a system needs the update?

Check whether any of the listed AlmaLinux bind9.18 packages are installed, especially bind9.18 or bind9.18-chroot on hosts operating named. The advisory identifies CVE-2026-19662 as the security fix included in ALSA-2026:89746.

Published Oct 26, 2026

Updated

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses (CVE-2026-19662)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

7 affected componentsFixes available

almalinux/bind9.18<32:9.18.29-14.el9_8.11

32:9.18.29-14.el9_8.11

almalinux/bind9.18-chroot<32:9.18.29-14.el9_8.11

32:9.18.29-14.el9_8.11

almalinux/bind9.18-devel<32:9.18.29-14.el9_8.11

32:9.18.29-14.el9_8.11

almalinux/bind9.18-dnssec-utils<32:9.18.29-14.el9_8.11

32:9.18.29-14.el9_8.11

almalinux/bind9.18-doc<32:9.18.29-14.el9_8.11

32:9.18.29-14.el9_8.11

almalinux/bind9.18-libs<32:9.18.29-14.el9_8.11

32:9.18.29-14.el9_8.11

almalinux/bind9.18-utils<32:9.18.29-14.el9_8.11

32:9.18.29-14.el9_8.11

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade almalinux/bind9.18 to a version that resolves this vulnerability.
Fixed in 32:9.18.29-14.el9_8.11
Upgrade
Upgrade almalinux/bind9.18-chroot to a version that resolves this vulnerability.
Fixed in 32:9.18.29-14.el9_8.11
Upgrade
Upgrade almalinux/bind9.18-devel to a version that resolves this vulnerability.
Fixed in 32:9.18.29-14.el9_8.11
Upgrade
Upgrade almalinux/bind9.18-dnssec-utils to a version that resolves this vulnerability.
Fixed in 32:9.18.29-14.el9_8.11
Upgrade
Upgrade almalinux/bind9.18-doc to a version that resolves this vulnerability.
Fixed in 32:9.18.29-14.el9_8.11
Upgrade
Upgrade almalinux/bind9.18-libs to a version that resolves this vulnerability.
Fixed in 32:9.18.29-14.el9_8.11
Upgrade
Upgrade almalinux/bind9.18-utils to a version that resolves this vulnerability.
Fixed in 32:9.18.29-14.el9_8.11

Event History

Oct 26, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-19662

Frequently Asked Questions

Which systems are most directly exposed to this issue?

Systems running the BIND named DNS server from the affected AlmaLinux bind9.18 packages are the most directly exposed, because the issue is a denial of service through crafted DNSSEC responses. The listed update also covers related chroot, library, utility, development, documentation, and DNSSEC utility packages.

What does an attacker need to exploit the vulnerability?

The available information identifies crafted DNSSEC responses as the trigger. It does not specify network position, authentication requirements, or other prerequisites.

How can I determine whether a system needs the update?

Check whether any of the listed AlmaLinux bind9.18 packages are installed, especially bind9.18 or bind9.18-chroot on hosts operating named. The advisory identifies CVE-2026-19662 as the security fix included in ALSA-2026:89746.

ALSA-2026:89746: Moderate: bind9.18 security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems are most directly exposed to this issue?

What does an attacker need to exploit the vulnerability?

How can I determine whether a system needs the update?

Company

Resources

Contact

Frequently Asked Questions

Which systems are most directly exposed to this issue?

What does an attacker need to exploit the vulnerability?

How can I determine whether a system needs the update?