RHSA-2026:95726: Important: bind security, bug fix, and enhancement update
Important: bind security, bug fix, and enhancement update
Other sources
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.Security Fix(es): bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274) bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666) bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630) bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300) Bug Fix(es) and Enhancement(s): bind: New root trust anchor key for DNSSEC [rhel-7-els] (JIRA:RHEL-131889) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/bindto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-chrootto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-debuginfoto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-develto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-export-develto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-export-libsto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-libsto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-libs-liteto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-licenseto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-lite-develto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-pkcs11to a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-pkcs11-develto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-pkcs11-libsto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-pkcs11-utilsto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-sdbto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-sdb-chrootto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22 - Upgrade
Upgrade
redhat/bind-utilsto a version that resolves this vulnerability.Fixed in 9.11.4-26.P2.el7_9.22