RHEL 8 : bind9.16 (RHSA-2026:79113)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:79113 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

AlmaLinux 9.2 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792588358)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792588358 advisory. - For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the...

Security update for bind

This update for bind fixes the following issues: CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. CVE-2026-19666: Use-after-free in...

CLSA-2026-1790962865 unbound: Fix of 4 CVEs

CVE-2026-82720: pop each reply off the mesh reply list before it is dropped or answered, detach the tcpreqinfo and DoH stream references and clear the h2 stream mesh states when a DoH session is dropped, so an RPZ drop or jostled query can no longer leave a dangling DoH stream reference that is...

hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records

A flaw was found in hickory-resolver. This vulnerability allows attackers to bypass Domain Name System Security Extensions DNSSEC authentication checks. By controlling the answering zone or being positioned on the network path, an attacker can have forged DNS records accepted as validated, leadin...

Important: Red Hat Security Advisory: rust-sequoia-sq security update

An update for rust-sequoia-sq is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

SUSE-SU-2026:24376-1 Security update for unbound

This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass window bsc1280404. - CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission...

ALSA-2026:85848 Important: rust-sequoia-sq security update

Command-line frontends for Sequoia. Security Fixes: hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records CVE-2026-93657 rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List CVE-2026-93599 For more details about the security...

RHEL 10 : rust-sequoia-sq (RHSA-2026:85848)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:85848 advisory. Command-line frontends for Sequoia. Security Fixes: hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records...

Fedora 44 : bind / bind-dyndb-ldap (2026-a5b5298a84)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-a5b5298a84 advisory. Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git...

MiracleLinux 9 : bind-9.16.23-40.el9_8.10 (AXSA:2026-2017:12)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2017:12 advisory. bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling CVE-2026-19667 bind: BIND: Denial of Service via...

RHEL 8 : bind9.16 (RHSA-2026:80501)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80501 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

CentOS Linux 7 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791226662)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791226662 advisory. - If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of thes...

AlmaLinux 9 : bind9.18 (ALSA-2026:75578)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75578 advisory. bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records CVE-2026-81736 bind9: bind: BIND 9: Denial of Service via 16-bit length...

CLSA-2026-1791261872 unbound: Fix of 4 CVEs

CVE-2026-81634: bounds-check the scratch buffer in rrsetcanonical and rrsetcanonicalizetobuffer before writing the RRSIG rdata, the first canonical owner name and each RR's rdata, so a large rrset can no longer be written past the end of the buffer - CVE-2026-80225: cap the number of pipelined...

Fedora 46 : bind / bind-dyndb-ldap (2026-56974571ee)

The remote Fedora 46 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-56974571ee advisory. Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Bind vulnerabilities (USN-8929-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8929-1 advisory. Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed...

MiracleLinux 9 : bind9.18-9.18.29-14.el9_8.10 (AXSA:2026-2081:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2081:06 advisory. bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records CVE-2026-81736 bind9: bind: BIND 9: Denial of Service via 16-bit leng...

CLSA-2026-1792089817 Fix CVE(s): CVE-2026-13321, CVE-2026-19666, CVE-2026-80274

SECURITY UPDATE: DNSSEC validation bypass via an out-of-zone NSEC Next Domain Name - debian/patches/CVE-2026-13321.patch: reject an NSEC RRset whose next owner name is not a subdomain of the RRSIG signer name in dnsdnssecverify3 in lib/dns/dnssec.c. - CVE-2026-13321 SECURITY UPDATE: assertion...

CLSA-2026-1792083184 Fix CVE(s): CVE-2026-13321, CVE-2026-19666, CVE-2026-80274

SECURITY UPDATE: DNSSEC validation bypass via an out-of-zone NSEC Next Domain Name - debian/patches/CVE-2026-13321.patch: reject an NSEC RRset whose next owner name is not a subdomain of the RRSIG signer name in dnsdnssecverify3 in lib/dns/dnssec.c. - CVE-2026-13321 SECURITY UPDATE: assertion...