[CLSA-2026:1790583590] bind: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-28 08:20:02 UTC
Description:
- CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in query_find(), so query_addnoqnameproof() no longer dereferences the rdataset that query_filter64() has already returned to the message rdataset pool - CVE-2026-19667: reject negative cache records that do not fit in a dns_rdata_t; copy_rdataset()/addoptout() now bound the assembled record by DNS_RDATA_MAXLENGTH instead of letting a 64 KiB record reach dns_rdataslab_fromrdataset(), where it trips INSIST(length <= 0xffff) and aborts named - CVE-2026-80274: record the denial type (NSEC or NSEC3) next to the NOQNAME proof owner so isc__rdatalist_getnoqname() returns the same denial record isc__rdatalist_addnoqname() selected, instead of the first one in wire order
CVEs fixed:
Updated packages:
  • bind-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:a533a5bcd0763af1901c3e5461e579b4d8a8c2935c1e969e4d35b62499c8b3a3
  • bind-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:3769ffd0c9ac0e71be684d37dc73542014bfcd2f863d6ec1b331f23a9c06e263
  • bind-chroot-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:f6fe8d2a078212ad2ce9831bf6fa05eff19f568fa445a86efc2f30ed61cff27b
  • bind-chroot-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:2ef8076ed09f04cdb5453b7fc7565b0088b5a24a3ba37108586fd27462216a15
  • bind-devel-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:bec63d1fba79edd4030c897a32e684586fe35a8acba799aeda964504aaf181d8
  • bind-devel-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:40e6a0b395b45d70aae17d0925bcbe5457deefdeb9b1bcbde8fc17781aecafbb
  • bind-export-devel-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:69c45632ef941713bb91b914689fe23097ee467e29f5c60f8d3d80a9f53da727
  • bind-export-devel-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:4566720a6fe003120c6167fed04c40e55979da8e887b4e1b541502ad3304b0b2
  • bind-export-libs-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:d59167005cc40cb0949bbaca4dc83a35caa6d4e12c127e42918caca25cfcbf58
  • bind-export-libs-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:334f571381f9b197c615ed391d0a708547ae4634df4a5d010bc076a5de80e073
  • bind-libs-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:95378ac2684e2a27983a5b5a03c3507aeab72725efae8a5164281b7ed1fc6d82
  • bind-libs-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:3c90b2382c1c8db69f14eedd59f996ed2fe5e65201d943870e29e75c65531934
  • bind-libs-lite-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:3a9b1b1bfe58038728d65b774aa79cd6bbfceb268fd3e1bb94f33f90a6aa52b2
  • bind-libs-lite-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:321c467e42994bf6d3734ba38d354fdf0cc6a4967234da18d6f00212bfe6469b
  • bind-license-9.11.36-13.el8.tuxcare.els14.noarch.rpm
    sha:5bd7a4b50d1e4afe17537b1ee728cd5ea3c30d1ecec4b70125053979aea5c40d
  • bind-lite-devel-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:6355ed63403f6a5e70c4e456d8161538191ecc32b5f7d67a9787bba2eb24fc36
  • bind-lite-devel-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:1f28505b3f85ba056862b9da57f0ad0eab9df9d65703899fabbfebfe942a0733
  • bind-pkcs11-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:28e53e74ac6fe798ffd23c679cab20967d2c159e27ddedfa4d150dd415718c38
  • bind-pkcs11-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:402e17bdfdb7761cd6e61f5f29fc4849ddfc71964a1845066f51c4e7e1ce360a
  • bind-pkcs11-devel-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:5767ed89fca86fe32f8264a816d1b79cb01507385c39f13da8cefa5c725d8262
  • bind-pkcs11-devel-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:544ab2ed6cf1b8bde4c82e4d7d0f980f400a05d780577dea8aadee59a7c6776f
  • bind-pkcs11-libs-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:92104e4f3e0b5c898a2ee767a724b0ab28fb606cb15fdc329f6dcdc132088106
  • bind-pkcs11-libs-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:5b8b611887bde73a8e8f9d9dd309a16c272eb1374890dbe7bbcbded3545cbdbf
  • bind-pkcs11-utils-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:30bf8539719e3f17dce0be7bf32dc4c8ca4ff81d0934cf7b347a14707a30e8ef
  • bind-pkcs11-utils-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:99d3fef6158b246421d368b7f22f82eb94e9065553c0b45b43f6d1aca6dfbb36
  • bind-sdb-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:cdadd9881e37db2648f9f088560ffcc9f4f4074304e9100b26dbbca8392d4f25
  • bind-sdb-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:3be6ab830551b79ede99fafe81a82ee35bfe5c16b680746e76d712037a84ce9a
  • bind-sdb-chroot-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:bc4d0553ac9c52819e7989fa347bd170c8ca8617d99b59132eccdbf8a11971ad
  • bind-sdb-chroot-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:240ca449a0af157445faae9f50210218e3c41c87cc59cb2479293e27016b0ac8
  • bind-utils-9.11.36-13.el8.tuxcare.els14.i686.rpm
    sha:a9bd5b9d874773721af8c83a6a0cfff24c4f28d638d730ca4aa16c50e615afeb
  • bind-utils-9.11.36-13.el8.tuxcare.els14.x86_64.rpm
    sha:1e1468bc0d960ff84f9974190ee28ec7257b62beb3853a82932bc75cc550480d
  • python3-bind-9.11.36-13.el8.tuxcare.els14.noarch.rpm
    sha:be6ac9ef632f7969b9bae9ec20c3580aad9c3dbdd7a4b83c43a5b19d4b10c1b2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.