RHSA-2026:54654HighCVSS 8.6

Red Hat Security Advisory: bind security update

Published
August 13, 2026
Last Modified
August 17, 2026

🔗 CVE IDs covered (5)

CVE-2026-10723 →CVE-2026-11622 →CVE-2026-11721 →CVE-2026-13204 →CVE-2026-13321 →

📋 Description

CVE-2026-10723 — bind: bind9: Incorrect acceptance of NSEC3 records CVE-2026-11622 — bind: bind9: Potential memory usage beyond configured limits CVE-2026-11721 — bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards CVE-2026-13204 — bind: bind9: Unexpected exit with NSEC and NSEC3 both present CVE-2026-13321 — bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field

🎯 Affected products173

  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-32:9.11.36-16.el8_10.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-32:9.11.36-16.el8_10.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-32:9.11.36-16.el8_10.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-32:9.11.36-16.el8_10.14.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-32:9.11.36-16.el8_10.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-chroot-32:9.11.36-16.el8_10.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-chroot-32:9.11.36-16.el8_10.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-chroot-32:9.11.36-16.el8_10.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-chroot-32:9.11.36-16.el8_10.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-debuginfo-32:9.11.36-16.el8_10.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-debuginfo-32:9.11.36-16.el8_10.14.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-debuginfo-32:9.11.36-16.el8_10.14.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-debuginfo-32:9.11.36-16.el8_10.14.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-debuginfo-32:9.11.36-16.el8_10.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-debuginfo-32:9.11.36-16.el8_10.14.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-debuginfo-32:9.11.36-16.el8_10.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-debuginfo-32:9.11.36-16.el8_10.14.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-debuginfo-32:9.11.36-16.el8_10.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-debuginfo-32:9.11.36-16.el8_10.14.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-debugsource-32:9.11.36-16.el8_10.14.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-debugsource-32:9.11.36-16.el8_10.14.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-debugsource-32:9.11.36-16.el8_10.14.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-debugsource-32:9.11.36-16.el8_10.14.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-debugsource-32:9.11.36-16.el8_10.14.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-debugsource-32:9.11.36-16.el8_10.14.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-debugsource-32:9.11.36-16.el8_10.14.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • bind-debugsource-32:9.11.36-16.el8_10.14.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • bind-debugsource-32:9.11.36-16.el8_10.14.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +143 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (8)