Red Hat Security Advisory

RHSA-2026:24368

bind9.18 security update

Released 2026-06-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) bind9.18-32:9.18.29-14.el9_8.2, bind9.18-chroot-32:9.18.29-14.el9_8.2, bind9.18-dnssec-utils-32:9.18.29-14.el9_8.2 +2
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) bind9.18-devel-32:9.18.29-14.el9_8.2, bind9.18-doc-32:9.18.29-14.el9_8.2, bind9.18-libs-32:9.18.29-14.el9_8.2

Fixes 2 records

TI-2026-05215 CVE-2026-5946 · GHSA-cqgq-ff3f-rj7r

Invalid handling of CLASS != IN

MEDIUM 43

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01942 Published 2026-05-20 Partial fix CWE-125

TI-2026-02623 CVE-2026-3039 · GHSA-p65f-mhrm-vhrc

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

MEDIUM 41

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01086 Published 2026-05-20 Partial fix CWE-771