RHSA-2026:54510HighCVSS 8.6

Red Hat Security Advisory: bind security update

Published
August 13, 2026
Last Modified
August 17, 2026

🔗 CVE IDs covered (6)

CVE-2026-10723 →CVE-2026-11331 →CVE-2026-11622 →CVE-2026-11721 →CVE-2026-13204 →CVE-2026-13321 →

📋 Description

CVE-2026-10723 — bind: bind9: Incorrect acceptance of NSEC3 records CVE-2026-11331 — bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11622 — bind: bind9: Potential memory usage beyond configured limits CVE-2026-11721 — bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards CVE-2026-13204 — bind: bind9: Unexpected exit with NSEC and NSEC3 both present CVE-2026-13321 — bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field

🎯 Affected products78

  • Red Hat Enterprise Linux AppStream (v. 9)
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-32:9.16.23-40.el9_8.8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-32:9.16.23-40.el9_8.8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-32:9.16.23-40.el9_8.8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-32:9.16.23-40.el9_8.8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-32:9.16.23-40.el9_8.8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-chroot-32:9.16.23-40.el9_8.8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-chroot-32:9.16.23-40.el9_8.8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-chroot-32:9.16.23-40.el9_8.8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-chroot-32:9.16.23-40.el9_8.8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-debuginfo-32:9.16.23-40.el9_8.8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-debuginfo-32:9.16.23-40.el9_8.8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-debuginfo-32:9.16.23-40.el9_8.8.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-debuginfo-32:9.16.23-40.el9_8.8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-debuginfo-32:9.16.23-40.el9_8.8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-debuginfo-32:9.16.23-40.el9_8.8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-debuginfo-32:9.16.23-40.el9_8.8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-debuginfo-32:9.16.23-40.el9_8.8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-debuginfo-32:9.16.23-40.el9_8.8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-debugsource-32:9.16.23-40.el9_8.8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-debugsource-32:9.16.23-40.el9_8.8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-debugsource-32:9.16.23-40.el9_8.8.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-debugsource-32:9.16.23-40.el9_8.8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-debugsource-32:9.16.23-40.el9_8.8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-debugsource-32:9.16.23-40.el9_8.8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-debugsource-32:9.16.23-40.el9_8.8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-debugsource-32:9.16.23-40.el9_8.8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • bind-debugsource-32:9.16.23-40.el9_8.8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • bind-devel-32:9.16.23-40.el9_8.8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • +48 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (9)