[CLSA-2026:1785161263] bind: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-07-27 14:07:55 UTC
Description:
- CVE-2026-10723: reject child-zone NSEC3 records whose signer does not match the owning zone apex, preventing forged authenticated NXDOMAIN responses - CVE-2026-13321: reject signed NSEC records whose Next Domain Name points outside the signer's zone, preventing cross-zone DNSSEC cache poisoning
CVEs fixed:
Updated packages:
  • bind-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:3e601e610ee728ade7c08b1e681159e02c187885ef77bd39ba139b85a1f6d918
  • bind-chroot-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:aa0ed80b140bd578c659cafaec6ea56858528ea1e9f32caec9dddced39902cf6
  • bind-devel-9.11.26-4.el8.4.tuxcare.els17.i686.rpm
    sha:81583451be03ce7fdf361610884774468c1ae0fc883b4347d35ee257d1855f68
  • bind-devel-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:24eb0add409f96fb2549b97380f3133652490e7295396afa428af1204f9e030a
  • bind-export-devel-9.11.26-4.el8.4.tuxcare.els17.i686.rpm
    sha:6d0fa545eb3a7f09319f11f869095f3aec7295d5d76de29ddd5c6af4f662eab7
  • bind-export-devel-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:0ea1994ac7e063e993d2ba140b9c0c5f8af82575d7e3e72e51f55eb27a9261a1
  • bind-export-libs-9.11.26-4.el8.4.tuxcare.els17.i686.rpm
    sha:4472754386d4f73ca9e6a47a12df3796571a0a96b1152706a1505041203db45e
  • bind-export-libs-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:e6b75fd47f6fec9a66c88e7cdcaa640d7657dd3598e36a2913bfd2e21629c9d7
  • bind-libs-9.11.26-4.el8.4.tuxcare.els17.i686.rpm
    sha:9e2c85819feb1e48c7dc84f41e90da5b0bca1c4d9c0b3686ff6d2c74c6ee41a5
  • bind-libs-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:86e1717691e1e5cd70dc5fa90a3f95b994ba741ada16a8eed4d69d70933b37e6
  • bind-libs-lite-9.11.26-4.el8.4.tuxcare.els17.i686.rpm
    sha:480564040ef6610a62d7116cfa52866db92538565ddb58d8163620ff3a4bcfdc
  • bind-libs-lite-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:b6cf7a6a7b91ea4efc33f8970d0a504d9a39051600fd336f764a18920e5351ee
  • bind-license-9.11.26-4.el8.4.tuxcare.els17.noarch.rpm
    sha:12594f30a72c2084a5438d5662b062014d4dd8ffede22210e43b01d021a11cde
  • bind-lite-devel-9.11.26-4.el8.4.tuxcare.els17.i686.rpm
    sha:15d691fb44fb842e8c08c8168aa3cba60b7e4f31ed3070a736628c856d650baf
  • bind-lite-devel-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:ac95d794ffa47b3457369a369e8084ada514f6d172417a499706d1e1f2f1adf9
  • bind-pkcs11-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:dbf6a70b22772d39605d527137c44a6f2e59ba59cf3cb8b11a2230a92ddf62c0
  • bind-pkcs11-devel-9.11.26-4.el8.4.tuxcare.els17.i686.rpm
    sha:b5a5fc9789a1240c271f0ed062a7b51c77faab5104f52b48c9b52295d9a6310c
  • bind-pkcs11-devel-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:21d5f387ad46f5c33017f788da240120e8911bd2e39268d7d664bea4ac0792ca
  • bind-pkcs11-libs-9.11.26-4.el8.4.tuxcare.els17.i686.rpm
    sha:59ca3c97cbdbe1e1797995a0d5834dfeef89017a23fb007cd3aac49f90033437
  • bind-pkcs11-libs-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:b3c2131a58346a07e6961c6d05d2313560e0dd28443e6cc632610ee952c2c5b7
  • bind-pkcs11-utils-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:dbfb9fee244a2741f4b2cdc79d043c3f2fd50c60771eabbb94f3c6adf36b9762
  • bind-sdb-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:9267f567d96ea59e87d7e781459837825775553c8bc974d28825bedf77ed85f7
  • bind-sdb-chroot-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:0485e3782fefbc93d69dfcb0380230c6885ccc0ede0304d23c3843b474e54169
  • bind-utils-9.11.26-4.el8.4.tuxcare.els17.x86_64.rpm
    sha:43cb6f8a33f019db5370ab60ce98f9477c75acb2be89d4d2154392ab398d3a33
  • python3-bind-9.11.26-4.el8.4.tuxcare.els17.noarch.rpm
    sha:432b4d9b383dcae8cf775371f6612bd869410b30c2ffc09727487e5872a6ab48
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.