Red Hat Security AdvisoryRHSA-2026:24339
bind security update
Released 2026-06-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) bind-32:9.11.36-16.el8_10.8, bind-chroot-32:9.11.36-16.el8_10.8, bind-devel-32:9.11.36-16.el8_10.8 +12
- Red Hat Enterprise Linux BaseOS (v. 8) bind-32:9.11.36-16.el8_10.8, bind-export-devel-32:9.11.36-16.el8_10.8, bind-export-libs-32:9.11.36-16.el8_10.8
Fixes 2 records
Priority MEDIUM 43
Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01942 · Published 2026-05-20 · Partial fix CWE-125
Priority MEDIUM 41
BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01086 · Published 2026-05-20 · Partial fix CWE-771
