Описание
ELSA-2026-8312: bind security update (IMPORTANT)
[9.18.33-10.0.2.el10_1.3]
- Hard require needed openssl-libs [Orabug: 38742109]
- Fix warning when changing device file permissions [Orabug: 36518580]
[32:9.18.33-10.3]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)
[32:9.18.33-10.2]
- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
[32:9.18.33-10.1]
- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
bind
9.18.33-10.0.2.el10_1.3
bind-chroot
9.18.33-10.0.2.el10_1.3
bind-devel
9.18.33-10.0.2.el10_1.3
bind-dnssec-utils
9.18.33-10.0.2.el10_1.3
bind-doc
9.18.33-10.0.2.el10_1.3
bind-libs
9.18.33-10.0.2.el10_1.3
bind-license
9.18.33-10.0.2.el10_1.3
bind-utils
9.18.33-10.0.2.el10_1.3
Oracle Linux x86_64
bind
9.18.33-10.0.2.el10_1.3
bind-chroot
9.18.33-10.0.2.el10_1.3
bind-devel
9.18.33-10.0.2.el10_1.3
bind-dnssec-utils
9.18.33-10.0.2.el10_1.3
bind-doc
9.18.33-10.0.2.el10_1.3
bind-libs
9.18.33-10.0.2.el10_1.3
bind-license
9.18.33-10.0.2.el10_1.3
bind-utils
9.18.33-10.0.2.el10_1.3
Связанные CVE
Связанные уязвимости
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.
Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
If a BIND resolver is performing DNSSEC validation and encounters a ma ...