[CLSA-2026:1785835455] bind: Fix of CVE-2026-11622
Type:
security
Severity:
Important
Release date:
2026-08-04 09:24:26 UTC
Description:
- CVE-2026-11622: runaway memory usage in a DNSSEC validating resolver under a random subdomain attack; superseded generations of a cached RRset stayed linked while validation kept the node referenced, so the cache grew far past max-cache-size - CVE-2026-11622: also reference-count the DNAME zone cut headers and initialise the counter for headers faulted in from a 'map' file, two gaps the upstream 9.11 fix leaves open
CVEs fixed:
Updated packages:
  • bind-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:456594dd2c6f55a07bf33842a964836dda8e8a650a1e7ed567a3ef5804dee377
  • bind-chroot-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:dc1e3647c2dbdbcbb2c70d1ff4dda515f76ef7f7a76c7c75b6a2ad0c814e0d73
  • bind-devel-9.11.36-13.el8.tuxcare.els12.i686.rpm
    sha:86dfde66760dbe476ec15c252388a26c4c53e2f23ea930ff20d19a79c9df4b1c
  • bind-devel-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:a325baa6da85c440df1ff4a2eb7aa001201266df14e48f87ad9f7fe1db4aa86c
  • bind-export-devel-9.11.36-13.el8.tuxcare.els12.i686.rpm
    sha:7e15dbdc9a0570d64c8fb41bef20b68d1056ec074a4a36ddaa8ec66d713b19bf
  • bind-export-devel-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:aba3939cae63a24db0e9bb6de19e9c69915ee8c709b0e38b993e77f948242eba
  • bind-export-libs-9.11.36-13.el8.tuxcare.els12.i686.rpm
    sha:4fe0a1d17b9e176466aa5a6a68caf3549b46745194888f50859c2a7a6406a4f9
  • bind-export-libs-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:3a531bd632a25c3ff46590f736e5d204f89d71a1965139787b7b93c0c94241b7
  • bind-libs-9.11.36-13.el8.tuxcare.els12.i686.rpm
    sha:b57a2b7c44cfed0a40b4a99ab41a522ca83a5a543faa78f7ee3f297ae9848bc2
  • bind-libs-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:3dcfa42684d27b2290fe78fdef05c69dc0f2e631319cec92bca7fce92b07e0b4
  • bind-libs-lite-9.11.36-13.el8.tuxcare.els12.i686.rpm
    sha:a931131b3ccb8f028a378756651b8b0079bd2af0cb2ac4b5981d7524d9b69a7d
  • bind-libs-lite-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:b1f715d75f6b69884d3edc33bb00ba544031965fa7c41040369a5d25658110f8
  • bind-license-9.11.36-13.el8.tuxcare.els12.noarch.rpm
    sha:6393508151382f73b5e9dcd6adfc4d0a891a21dc2f12b7e80411048bb81e6fc5
  • bind-lite-devel-9.11.36-13.el8.tuxcare.els12.i686.rpm
    sha:a67a4b338d57335a34f296cbe14b6756ec0aa2fe7688a04219aed0113ce1e985
  • bind-lite-devel-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:bdbe5decc83665b6da6d8261d7d8acac93d07a913471fcf44a06b40261ffbb00
  • bind-pkcs11-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:4a28a6c70e5642d8c00a2c3f7871701d774550f18811eab98f16d1ab7aa9baf7
  • bind-pkcs11-devel-9.11.36-13.el8.tuxcare.els12.i686.rpm
    sha:51148f9218ed137426d12181bb3450ac5f395006987f9ae94d7de9e68719ded8
  • bind-pkcs11-devel-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:28198b20c8cdf033a8cd171c4c4afa416cb25fda0d0498c7b7dc0267692dc0b9
  • bind-pkcs11-libs-9.11.36-13.el8.tuxcare.els12.i686.rpm
    sha:189ce42f17e4449d9648ffd5327694a7d49e4f3a41604b1d938f50c30e0a2ea2
  • bind-pkcs11-libs-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:c2004a032bae92129b2eeb457a312e3edd2208a1eff4fad8b606902fb079829b
  • bind-pkcs11-utils-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:611ddc3d8786ca55b52d9c5714faed5a9a26cea6593430192a2177417ee01d9f
  • bind-sdb-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:c46f60ed2a4fc495bd36e23e29bacd9b54d5ff1b55b9386ce0112995c4217253
  • bind-sdb-chroot-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:33fb7c5bbf57146933f44e6525a162c7953c3dc48ff2084a384a04d395aec932
  • bind-utils-9.11.36-13.el8.tuxcare.els12.x86_64.rpm
    sha:9c6e6116daefa9488eca3c07180a3526ffcdabf49306daeeaaac1e801c97d000
  • python3-bind-9.11.36-13.el8.tuxcare.els12.noarch.rpm
    sha:a066f265f02fd8e3e6c5ebd6f8890466c39bf090ae27e1830725a4b7a4558767
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.