Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Bind may run out of memory during secure key exchange
published 5 months ago
Summary
The Bind DNS software on AlmaLinux can use up all available memory when it negotiates a secure key (TKEY) using GSS-API. This can cause the service to slow down or stop working, affecting name resolution for your network. Update the Bind packages to the latest version to prevent the memory exhaustion.
What to do
- Update almalinux bind to version 32:9.16.23-11.el9_2.2.tuxcare.els10.
- Update almalinux bind-chroot to version 32:9.16.23-11.el9_2.2.tuxcare.els10.
- Update almalinux bind-devel to version 32:9.16.23-11.el9_2.2.tuxcare.els10.
- Update almalinux bind-dnssec-doc to version 32:9.16.23-11.el9_2.2.tuxcare.els10.
- Update almalinux bind-dnssec-utils to version 32:9.16.23-11.el9_2.2.tuxcare.els10.
- Update almalinux bind-doc to version 32:9.16.23-11.el9_2.2.tuxcare.els10.
- Update almalinux bind-libs to version 32:9.16.23-11.el9_2.2.tuxcare.els10.
- Update almalinux bind-license to version 32:9.16.23-11.el9_2.2.tuxcare.els10.
- Update almalinux bind-utils to version 32:9.16.23-11.el9_2.2.tuxcare.els10.
- Update almalinux python3-bind to version 32:9.16.23-11.el9_2.2.tuxcare.els10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.2 | almalinux | bind |
< 32:9.16.23-11.el9_2.2.tuxcare.els10 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els10
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-chroot |
< 32:9.16.23-11.el9_2.2.tuxcare.els10 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els10
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-devel |
< 32:9.16.23-11.el9_2.2.tuxcare.els10 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els10
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-dnssec-doc |
< 32:9.16.23-11.el9_2.2.tuxcare.els10 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els10
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-dnssec-utils |
< 32:9.16.23-11.el9_2.2.tuxcare.els10 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els10
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-doc |
< 32:9.16.23-11.el9_2.2.tuxcare.els10 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els10
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-libs |
< 32:9.16.23-11.el9_2.2.tuxcare.els10 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els10
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-license |
< 32:9.16.23-11.el9_2.2.tuxcare.els10 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els10
|
| TuxCare:AlmaLinux:9.2 | almalinux | bind-utils |
< 32:9.16.23-11.el9_2.2.tuxcare.els10 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els10
|
| TuxCare:AlmaLinux:9.2 | almalinux | python3-bind |
< 32:9.16.23-11.el9_2.2.tuxcare.els10 Fix: upgrade to 32:9.16.23-11.el9_2.2.tuxcare.els10
|
Original advisory text
bind: Fix of CVE-2026-3039
- CVE-2026-3039: fix GSS-API memory exhaustion during TKEY negotiation
References
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1780407449.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-3039 Vendor Advisory
Timeline
Published2 Jun 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1780407449 · OSV
Track software like this
Free during beta