alsa-2026:94011
osv_almalinux
Description
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses (CVE-2026-19662) * bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630) * bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300) * bind: bind: Denial of Service via assertion failure during redirect processing (CVE-2026-96888) * bind: bind: Denial of service via assertion failure in RPZ query processing (CVE-2026-97313) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Timeline
- Published
- unknown
- Last Modified
- unknown
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
- https://access.redhat.com/errata/RHSA-2026:94011
- https://access.redhat.com/security/cve/CVE-2026-19630
- https://access.redhat.com/security/cve/CVE-2026-19662
- https://access.redhat.com/security/cve/CVE-2026-94300
- https://access.redhat.com/security/cve/CVE-2026-96888
- https://access.redhat.com/security/cve/CVE-2026-97313
- https://bugzilla.redhat.com/2535445
- https://bugzilla.redhat.com/2556406
- https://bugzilla.redhat.com/2556407
- https://bugzilla.redhat.com/2556413
- https://bugzilla.redhat.com/2556415
- https://errata.almalinux.org/8/ALSA-2026-94011.html
Linked Vulnerabilities
No linked vulnerabilities found.
{
"affected": [
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:94011.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "bind9.16",
"purl": "pkg:rpm/almalinux/bind9.16"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "32:9.16.23-0.22.el8_10.21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:94011.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "bind9.16-chroot",
"purl": "pkg:rpm/almalinux/bind9.16-chroot"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "32:9.16.23-0.22.el8_10.21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:94011.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "bind9.16-devel",
"purl": "pkg:rpm/almalinux/bind9.16-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "32:9.16.23-0.22.el8_10.21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:94011.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "bind9.16-dnssec-utils",
"purl": "pkg:rpm/almalinux/bind9.16-dnssec-utils"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "32:9.16.23-0.22.el8_10.21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:94011.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "bind9.16-doc",
"purl": "pkg:rpm/almalinux/bind9.16-doc"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "32:9.16.23-0.22.el8_10.21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:94011.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "bind9.16-libs",
"purl": "pkg:rpm/almalinux/bind9.16-libs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "32:9.16.23-0.22.el8_10.21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:94011.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "bind9.16-license",
"purl": "pkg:rpm/almalinux/bind9.16-license"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "32:9.16.23-0.22.el8_10.21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:94011.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "bind9.16-utils",
"purl": "pkg:rpm/almalinux/bind9.16-utils"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "32:9.16.23-0.22.el8_10.21"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:94011.json"
},
"package": {
"ecosystem": "AlmaLinux:8",
"name": "python3-bind9.16",
"purl": "pkg:rpm/almalinux/python3-bind9.16"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "32:9.16.23-0.22.el8_10.21"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. \n\nSecurity Fix(es): \n\n * bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses (CVE-2026-19662)\n * bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630)\n * bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300)\n * bind: bind: Denial of Service via assertion failure during redirect processing (CVE-2026-96888)\n * bind: bind: Denial of service via assertion failure in RPZ query processing (CVE-2026-97313)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
"id": "ALSA-2026:94011",
"modified": "2026-11-03T12:15:02.399920974Z",
"published": "2026-11-02T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2026:94011"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-19630"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-19662"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-94300"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-96888"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2026-97313"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2535445"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2556406"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2556407"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2556413"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2556415"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/8/ALSA-2026-94011.html"
}
],
"related": [
"CVE-2026-19630",
"CVE-2026-19662",
"CVE-2026-94300",
"CVE-2026-96888",
"CVE-2026-97313"
],
"schema_version": "1.9.2",
"summary": "Important: bind9.16 security update",
"upstream": [
"CVE-2026-19630",
"CVE-2026-19662",
"CVE-2026-94300",
"CVE-2026-96888",
"CVE-2026-97313"
]
}