Red Hat Security Advisory

RHSA-2026:23360

bind9.16 security update

Released 2026-06-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) bind9.16-32:9.16.23-0.22.el8_10.6, bind9.16-chroot-32:9.16.23-0.22.el8_10.6, bind9.16-dnssec-utils-32:9.16.23-0.22.el8_10.6 +4
Red Hat Enterprise Linux CRB (v. 8) bind9.16-devel-32:9.16.23-0.22.el8_10.6, bind9.16-doc-32:9.16.23-0.22.el8_10.6, bind9.16-libs-32:9.16.23-0.22.el8_10.6

Fixes 2 records

TI-2026-05215 CVE-2026-5946 · GHSA-cqgq-ff3f-rj7r

Invalid handling of CLASS != IN

MEDIUM 43

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01942 Published 2026-05-20 Partial fix CWE-125

TI-2026-02623 CVE-2026-3039 · GHSA-p65f-mhrm-vhrc

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

MEDIUM 41

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01086 Published 2026-05-20 Partial fix CWE-771