Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Bind on AlmaLinux may exhaust server resources
published 5 months ago
Summary
The Bind DNS software provided by AlmaLinux can get stuck in a repeat loop or return too many addresses, which can overload the server and affect performance. This could make the DNS service slow or unavailable. Updating Bind to the latest version from AlmaLinux resolves the issue and restores normal operation.
What to do
- Update almalinux bind to version 32:9.16.23-11.el9_2.2.tuxcare.els12.
- Update almalinux bind-chroot to version 32:9.16.23-11.el9_2.2.tuxcare.els12.
- Update almalinux bind-devel to version 32:9.16.23-11.el9_2.2.tuxcare.els12.
- Update almalinux bind-dnssec-doc to version 32:9.16.23-11.el9_2.2.tuxcare.els12.
- Update almalinux bind-dnssec-utils to version 32:9.16.23-11.el9_2.2.tuxcare.els12.
- Update almalinux bind-doc to version 32:9.16.23-11.el9_2.2.tuxcare.els12.
- Update almalinux bind-libs to version 32:9.16.23-11.el9_2.2.tuxcare.els12.
- Update almalinux bind-license to version 32:9.16.23-11.el9_2.2.tuxcare.els12.
- Update almalinux bind-utils to version 32:9.16.23-11.el9_2.2.tuxcare.els12.
- Update almalinux python3-bind to version 32:9.16.23-11.el9_2.2.tuxcare.els12.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.2 | almalinux | bind |
< 32:9.16.23-11.el9_2.2.tuxcare.els12 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els12
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-chroot |
< 32:9.16.23-11.el9_2.2.tuxcare.els12 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els12
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-devel |
< 32:9.16.23-11.el9_2.2.tuxcare.els12 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els12
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-dnssec-doc |
< 32:9.16.23-11.el9_2.2.tuxcare.els12 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els12
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-dnssec-utils |
< 32:9.16.23-11.el9_2.2.tuxcare.els12 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els12
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-doc |
< 32:9.16.23-11.el9_2.2.tuxcare.els12 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els12
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-libs |
< 32:9.16.23-11.el9_2.2.tuxcare.els12 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els12
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-license |
< 32:9.16.23-11.el9_2.2.tuxcare.els12 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els12
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-utils |
< 32:9.16.23-11.el9_2.2.tuxcare.els12 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els12
|
| TuxCare:AlmaLinux:9.2 | almalinux | python3-bind |
< 32:9.16.23-11.el9_2.2.tuxcare.els12 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els12
|
Original advisory text
bind: Fix of 2 CVEs
- CVE-2026-5950: fix unbounded resend loop in resolver bad-server handling
- CVE-2026-3592: limit addresses returned per ADB find and dedup resolver
SLIST to mitigate resource-exhaustion amplification
- CVE-2026-3592: limit addresses returned per ADB find and dedup resolver
SLIST to mitigate resource-exhaustion amplification
References
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1780406442.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-3592 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-5950 Vendor Advisory
Timeline
Published2 Jun 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1780406442 · OSV
Track software like this
Free during beta