Red Hat Security Advisory

RHSA-2026:93925

bind security, bug fix, and enhancement update

Released 2026-11-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) bind-32:9.11.36-18.el8_10, bind-chroot-32:9.11.36-18.el8_10, bind-devel-32:9.11.36-18.el8_10 +12
Red Hat Enterprise Linux BaseOS (v. 8) bind-32:9.11.36-18.el8_10, bind-export-devel-32:9.11.36-18.el8_10, bind-export-libs-32:9.11.36-18.el8_10

TI-2026-78763 CVE-2026-94300 · GHSA-3g58-6x5w-h3fm

LOW 39

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`".

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00953 Published 2026-10-21 Partial fix CWE-362

TI-2026-78762 CVE-2026-19630 · GHSA-53h2-668w-c49r

LOW 39

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2026-10-21 Partial fix CWE-407

TI-2026-15965 CVE-2026-19662 · GHSA-pqfm-7x4v-9w63

LOW 27

An attacker may be able to cause a `named` resolver to abort.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00464 Published 2026-09-16 Partial fix CWE-416