RHSA-2026:55437HighCVSS 8.6

Red Hat Security Advisory: bind security update

Published
August 17, 2026
Last Modified
August 18, 2026

🔗 CVE IDs covered (6)

CVE-2026-10723 →CVE-2026-11331 →CVE-2026-11622 →CVE-2026-11721 →CVE-2026-13204 →CVE-2026-13321 →

📋 Description

CVE-2026-10723 — bind: bind9: Incorrect acceptance of NSEC3 records CVE-2026-11331 — bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11622 — bind: bind9: Potential memory usage beyond configured limits CVE-2026-11721 — bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards CVE-2026-13204 — bind: bind9: Unexpected exit with NSEC and NSEC3 both present CVE-2026-13321 — bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field

🎯 Affected products69

  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-32:9.18.33-15.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-32:9.18.33-15.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-32:9.18.33-15.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-32:9.18.33-15.el10_2.10.src as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-32:9.18.33-15.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-chroot-32:9.18.33-15.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-chroot-32:9.18.33-15.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-chroot-32:9.18.33-15.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-chroot-32:9.18.33-15.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-debuginfo-32:9.18.33-15.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-debuginfo-32:9.18.33-15.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-debuginfo-32:9.18.33-15.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-debuginfo-32:9.18.33-15.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-debuginfo-32:9.18.33-15.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-debuginfo-32:9.18.33-15.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-debuginfo-32:9.18.33-15.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-debuginfo-32:9.18.33-15.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-debugsource-32:9.18.33-15.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-debugsource-32:9.18.33-15.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-debugsource-32:9.18.33-15.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-debugsource-32:9.18.33-15.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-debugsource-32:9.18.33-15.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-debugsource-32:9.18.33-15.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-debugsource-32:9.18.33-15.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • bind-debugsource-32:9.18.33-15.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-devel-32:9.18.33-15.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-devel-32:9.18.33-15.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • bind-devel-32:9.18.33-15.el10_2.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • +39 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (9)