RHSA-2026:54509HighCVSS 8.6

Red Hat Security Advisory: bind9.16 security update

Published
August 13, 2026
Last Modified
August 17, 2026

🔗 CVE IDs covered (6)

CVE-2026-10723 →CVE-2026-11331 →CVE-2026-11622 →CVE-2026-11721 →CVE-2026-13204 →CVE-2026-13321 →

📋 Description

CVE-2026-10723 — bind: bind9: Incorrect acceptance of NSEC3 records CVE-2026-11331 — bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11622 — bind: bind9: Potential memory usage beyond configured limits CVE-2026-11721 — bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards CVE-2026-13204 — bind: bind9: Unexpected exit with NSEC and NSEC3 both present CVE-2026-13321 — bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field

🎯 Affected products77

  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-32:9.16.23-0.22.el8_10.12.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-32:9.16.23-0.22.el8_10.12.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-32:9.16.23-0.22.el8_10.12.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-32:9.16.23-0.22.el8_10.12.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-32:9.16.23-0.22.el8_10.12.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-chroot-32:9.16.23-0.22.el8_10.12.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-chroot-32:9.16.23-0.22.el8_10.12.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-chroot-32:9.16.23-0.22.el8_10.12.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-chroot-32:9.16.23-0.22.el8_10.12.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-debuginfo-32:9.16.23-0.22.el8_10.12.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-debuginfo-32:9.16.23-0.22.el8_10.12.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-debuginfo-32:9.16.23-0.22.el8_10.12.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-debuginfo-32:9.16.23-0.22.el8_10.12.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-debuginfo-32:9.16.23-0.22.el8_10.12.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-debuginfo-32:9.16.23-0.22.el8_10.12.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-debuginfo-32:9.16.23-0.22.el8_10.12.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-debuginfo-32:9.16.23-0.22.el8_10.12.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-debuginfo-32:9.16.23-0.22.el8_10.12.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-debugsource-32:9.16.23-0.22.el8_10.12.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-debugsource-32:9.16.23-0.22.el8_10.12.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-debugsource-32:9.16.23-0.22.el8_10.12.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-debugsource-32:9.16.23-0.22.el8_10.12.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-debugsource-32:9.16.23-0.22.el8_10.12.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-debugsource-32:9.16.23-0.22.el8_10.12.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-debugsource-32:9.16.23-0.22.el8_10.12.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-debugsource-32:9.16.23-0.22.el8_10.12.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind9.16-debugsource-32:9.16.23-0.22.el8_10.12.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • bind9.16-devel-32:9.16.23-0.22.el8_10.12.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • +47 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (9)