Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
BIND DNS server may crash or be exploited
published 3 days ago
Summary
The BIND DNS software used on Almalinux systems can be forced to stop working or allow attackers to run code by sending specially crafted DNS messages. This can disrupt internet services for your users and expose your network to further attacks. Apply the latest security updates for all BIND packages as soon as possible.
What to do
- Update almalinux bind to version 32:9.16.23-40.el9_8.13.
- Update almalinux bind-chroot to version 32:9.16.23-40.el9_8.13.
- Update almalinux bind-devel to version 32:9.16.23-40.el9_8.13.
- Update almalinux bind-dnssec-doc to version 32:9.16.23-40.el9_8.13.
- Update almalinux bind-dnssec-utils to version 32:9.16.23-40.el9_8.13.
- Update almalinux bind-doc to version 32:9.16.23-40.el9_8.13.
- Update almalinux bind-libs to version 32:9.16.23-40.el9_8.13.
- Update almalinux bind-license to version 32:9.16.23-40.el9_8.13.
- Update almalinux bind-utils to version 32:9.16.23-40.el9_8.13.
- Update almalinux python3-bind to version 32:9.16.23-40.el9_8.13.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:9 | almalinux | bind |
< 32:9.16.23-40.el9_8.13 Fix: upgrade to 32:9.16.23-40.el9_8.13
|
| AlmaLinux:9 | almalinux | bind-chroot |
< 32:9.16.23-40.el9_8.13 Fix: upgrade to 32:9.16.23-40.el9_8.13
|
| AlmaLinux:9 | almalinux | bind-devel |
< 32:9.16.23-40.el9_8.13 Fix: upgrade to 32:9.16.23-40.el9_8.13
|
| AlmaLinux:9 | almalinux | bind-dnssec-doc |
< 32:9.16.23-40.el9_8.13 Fix: upgrade to 32:9.16.23-40.el9_8.13
|
| AlmaLinux:9 | almalinux | bind-dnssec-utils |
< 32:9.16.23-40.el9_8.13 Fix: upgrade to 32:9.16.23-40.el9_8.13
|
| AlmaLinux:9 | almalinux | bind-doc |
< 32:9.16.23-40.el9_8.13 Fix: upgrade to 32:9.16.23-40.el9_8.13
|
| AlmaLinux:9 | almalinux | bind-libs |
< 32:9.16.23-40.el9_8.13 Fix: upgrade to 32:9.16.23-40.el9_8.13
|
| AlmaLinux:9 | almalinux | bind-license |
< 32:9.16.23-40.el9_8.13 Fix: upgrade to 32:9.16.23-40.el9_8.13
|
| AlmaLinux:9 | almalinux | bind-utils |
< 32:9.16.23-40.el9_8.13 Fix: upgrade to 32:9.16.23-40.el9_8.13
|
| AlmaLinux:9 | almalinux | python3-bind |
< 32:9.16.23-40.el9_8.13 Fix: upgrade to 32:9.16.23-40.el9_8.13
|
Original advisory text
Important: bind security update
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Security Fix(es):
* bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630)
* bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300)
* bind: bind: Denial of Service via assertion failure during redirect processing (CVE-2026-96888)
* bind: bind: Denial of service via assertion failure in RPZ query processing (CVE-2026-97313)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630)
* bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300)
* bind: bind: Denial of Service via assertion failure during redirect processing (CVE-2026-96888)
* bind: bind: Denial of service via assertion failure in RPZ query processing (CVE-2026-97313)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://bugzilla.redhat.com/2556413 Third Party Advisory
- https://bugzilla.redhat.com/2556415 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:93610 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-19630 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-94300 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-96888 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-97313 Third Party Advisory
- https://bugzilla.redhat.com/2556406 Third Party Advisory
- https://bugzilla.redhat.com/2556407 Third Party Advisory
- https://errata.almalinux.org/9/ALSA-2026-93610.html Vendor Advisory
Timeline
Published2 Nov 2026
Updated2 Nov 2026
First seen2 Nov 2026
Sources
ALSA-2026:93610 · OSV
Track software like this
Free during beta