Red Hat Security Advisory

RHSA-2026:95726

bind security, bug fix, and enhancement update

Released 2026-11-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) bind-32:9.11.4-26.P2.el7_9.22, bind-export-libs-32:9.11.4-26.P2.el7_9.22, bind-export-libs-32:9.11.4-26.P2.el7_9.22.ppc +7
Red Hat Enterprise Linux Server Optional (v. 7 ELS) bind-sdb-32:9.11.4-26.P2.el7_9.22

Fixes 4 records

TI-2026-55474 CVE-2026-80274 · GHSA-m66j-g9q7-jxjg

Validating resolver can abort while caching a mismatched NOQNAME proof

MEDIUM 40

If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it w…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00569 Published 2026-09-16 Partial fix CWE-617

TI-2026-15966 CVE-2026-19666 · GHSA-2rph-fg4h-9hjq

Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path

MEDIUM 40

On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00569 Published 2026-09-16 Partial fix CWE-416

TI-2026-78763 CVE-2026-94300 · GHSA-3g58-6x5w-h3fm

Replayed GSS-TSIG messages corrupt memory in ISC BIND 9

LOW 39

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`".

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00953 Published 2026-10-21 Partial fix CWE-362

TI-2026-78762 CVE-2026-19630 · GHSA-53h2-668w-c49r

Resource exhaustion in BIND 9 via crafted inbound DNS messages

LOW 39

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2026-10-21 Partial fix CWE-407