Red Hat Product Errata RHSA-2026:95726 - Security Advisory
Issued:
2026-11-05
Updated:
2026-11-05

RHSA-2026:95726 - Security Advisory

Synopsis

Important: bind security, bug fix, and enhancement update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for bind is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)
  • bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)
  • bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630)
  • bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300)

Bug Fix(es) and Enhancement(s):

  • bind: New root trust anchor key for DNSSEC [rhel-7-els] (JIRA:RHEL-131889)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2535466 - CVE-2026-80274 bind: BIND: Denial of Service via crafted DNSSEC reply
  • BZ - 2535477 - CVE-2026-19666 bind: BIND: Denial of Service via malformed DNS64 responses
  • BZ - 2556406 - CVE-2026-19630 bind: BIND: Denial of Service via unbounded processing of crafted DNS messages
  • BZ - 2556407 - CVE-2026-94300 bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
bind-9.11.4-26.P2.el7_9.22.src.rpm SHA-256: aa465c5b54f5abb66d9d320e16a7f3748824a515e99f415ba5029777c875cae5
x86_64
bind-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 859e38a1867f29df53574bda0c7a6b39bd7c3435ef159dd8bc87701174829de3
bind-chroot-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: f2ce6a9b34e2db4f0a30eaa0879f220726be4e7c825d111f242b581832971848
bind-debuginfo-9.11.4-26.P2.el7_9.22.i686.rpm SHA-256: b16fe7ec5c800f4c841689a97035b3c21435e723d8e78d5f084394cdefbe333d
bind-debuginfo-9.11.4-26.P2.el7_9.22.i686.rpm SHA-256: b16fe7ec5c800f4c841689a97035b3c21435e723d8e78d5f084394cdefbe333d
bind-debuginfo-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 3a82f21448a3409f2dcc5e314ab49ced4fc66a91b87d5cc4679f18861e9a47da
bind-debuginfo-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 3a82f21448a3409f2dcc5e314ab49ced4fc66a91b87d5cc4679f18861e9a47da
bind-devel-9.11.4-26.P2.el7_9.22.i686.rpm SHA-256: a26ce6c4e2b2b0ef22e6499896037840f413db0cbbf6504d2a7c5b9942c18493
bind-devel-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 7c696de2f1f8951e74a74866463b57e19cdfce79abc57b04ebbf8d4a84caaca0
bind-export-devel-9.11.4-26.P2.el7_9.22.i686.rpm SHA-256: 2ea78466ec3cc9d3f5bdb2b9a09b401471ee1be701cf4adcda01b5ed5f2ff785
bind-export-devel-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 9a42f78dedab10eb3bc7b26a9da2e44de0d58fa036965fbe71ec6a99aca25608
bind-export-libs-9.11.4-26.P2.el7_9.22.i686.rpm SHA-256: befe17fbdfe9bfeacc298457e9f53c48098d3348ee603cdb220886049f54d053
bind-export-libs-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 2044568017048cea0a40ab22cf9884f099eb3ed1fcbb8f50b0e168853e32a92f
bind-libs-9.11.4-26.P2.el7_9.22.i686.rpm SHA-256: d76bd12a38904e2ffb045b10f9dc0be8acb08efca37d35560103a6825d193080
bind-libs-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 2ee861c38b4c73e3be16619ec80e51013350432f2942df88cf0ae4645989c4c0
bind-libs-lite-9.11.4-26.P2.el7_9.22.i686.rpm SHA-256: 108693da0b766d92114ae7fe3509bf5f2c8199aa780c8c001d830cdedfea3cb9
bind-libs-lite-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 751d98368a54cdb1f81a14ed6c9774ee4aeeb64c5a432063232e49be58a1a777
bind-license-9.11.4-26.P2.el7_9.22.noarch.rpm SHA-256: 40e9ce8e97f48a56d5a55096fafa172563ff5f7f9ad1b8f26a4af12b5f8d6c4a
bind-lite-devel-9.11.4-26.P2.el7_9.22.i686.rpm SHA-256: 77243ed80923a4694d70c676040e13e513d0023334f055710fb37d4a002ad01a
bind-lite-devel-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: d9685245267762a120bbc0b4af03b188683155a2f2f440f3e0fc0be63470cc96
bind-pkcs11-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 9f3440c489837606cdbab65c7f47fbd3b89c30dabe21d253912f7194071fad76
bind-pkcs11-devel-9.11.4-26.P2.el7_9.22.i686.rpm SHA-256: 6c5c2bc2e1d39a03846115a50976688732f0bbde143943f9a735b7c7127b8a42
bind-pkcs11-devel-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 6f0c0482fd0772209831278b0343210b41f9d4e96a77fc4d52e17c85b709d125
bind-pkcs11-libs-9.11.4-26.P2.el7_9.22.i686.rpm SHA-256: a6e722046744e0c5ad6e445c3b24d9556f56b3cad2dc594d20aa9c95a587a06d
bind-pkcs11-libs-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: bbb38213e4e23fd9e59048e0222fdaa1ab2a22a1a093cf2caa27b858abcadc58
bind-pkcs11-utils-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: fcae816adc237b08caca69c87751b8741d2a8c3dd29bf77a0e2b9f988e3ab1d5
bind-sdb-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: c004ad3d75fd111c2cf1d1b6b2f588c1a192e6ae8871b3d5e999a7a529011008
bind-sdb-chroot-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: 603a913f56b21589c223925085844b72246003b13f562bbb958a91fe07ee10b9
bind-utils-9.11.4-26.P2.el7_9.22.x86_64.rpm SHA-256: fab4f59e168b26720b52880509c7d1654e728c9846808c7f0e7ba152de59beca

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
bind-9.11.4-26.P2.el7_9.22.src.rpm SHA-256: aa465c5b54f5abb66d9d320e16a7f3748824a515e99f415ba5029777c875cae5
s390x
bind-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 668f069e0dd7d033bea6a18edd775918c20412cc5165ad315cde103b28c8e419
bind-chroot-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: aaf8c7b874875a72383c2f6c8395ae1dba4c39bce2eef9cf3bd5a3e6ed3973c8
bind-debuginfo-9.11.4-26.P2.el7_9.22.s390.rpm SHA-256: a6d85652cafd8753fb30db3bf9e31a6be91f0927ae3eb6eab9d19eafe7bb7abc
bind-debuginfo-9.11.4-26.P2.el7_9.22.s390.rpm SHA-256: a6d85652cafd8753fb30db3bf9e31a6be91f0927ae3eb6eab9d19eafe7bb7abc
bind-debuginfo-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 4efc140af18de30d4a5cc8b25610897af4b22fe6a7939e903d5ce8fe111a4e49
bind-debuginfo-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 4efc140af18de30d4a5cc8b25610897af4b22fe6a7939e903d5ce8fe111a4e49
bind-devel-9.11.4-26.P2.el7_9.22.s390.rpm SHA-256: 673c022a06fb7a0ec12b229e9c60c099877624e94e69908cb3adb40ae79c9cd4
bind-devel-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 3fb1f0b8d2c15bdb28700401785adc83de4eddd554ac9a98501e3c00360beff1
bind-export-devel-9.11.4-26.P2.el7_9.22.s390.rpm SHA-256: c4896189d5e9ff0c028db732bc15d11b4af07e3ac51b1e1522d885ebc02405f0
bind-export-devel-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 575cd8336bf9f65d354a9f38ca90a0edc837a9bbe48db32c0eecccaccffbd48b
bind-export-libs-9.11.4-26.P2.el7_9.22.s390.rpm SHA-256: eaea8a0b2ab04e0636231054c1d5bd8d58bef80047fd31a444a1d0b79f5716ec
bind-export-libs-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 19a45dd50860db9a2d372437c58279a36fcbead67935fdad9c33858a5d7008a1
bind-libs-9.11.4-26.P2.el7_9.22.s390.rpm SHA-256: aa5c0659477433de8a0f113cbbe3c4dc414c2992b0288e9ae8b0a114634e40d7
bind-libs-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 83c56e5ff21022674408e5d67cc7a3f0ac213f39e6f7fc0618ec841b5d467126
bind-libs-lite-9.11.4-26.P2.el7_9.22.s390.rpm SHA-256: 46dbcbf65778261859dbbf37fb6ebd6e8d227103a284c5ecc380681c20975157
bind-libs-lite-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 73454ebdd506150e9e17d83e2c17621ab19975f8520662a41ac6f76755239054
bind-license-9.11.4-26.P2.el7_9.22.noarch.rpm SHA-256: 40e9ce8e97f48a56d5a55096fafa172563ff5f7f9ad1b8f26a4af12b5f8d6c4a
bind-lite-devel-9.11.4-26.P2.el7_9.22.s390.rpm SHA-256: 94d99b8068eb9a820dd1d82f505985d60d53fef69d91654e4439cba1fd96eb7a
bind-lite-devel-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 25890c1dbd37a15224dd2274eac85d52b5b1ccdbf6a1ff565292e9d75c415d5d
bind-pkcs11-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 55467250c957916453658b2c23eb66251dc0aceb7b5c64972b15c35e69642f84
bind-pkcs11-devel-9.11.4-26.P2.el7_9.22.s390.rpm SHA-256: b881e192a9d5538a388c3e1ebddef92e8133fd4c90712dec16e33144ef9e744c
bind-pkcs11-devel-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 2265628dcc6f35b90f76e43438f95e311083d184e4c13a9eafe27767474d18b8
bind-pkcs11-libs-9.11.4-26.P2.el7_9.22.s390.rpm SHA-256: ca6b32fc852f6c99111344822786613ab37a74df0bde699333caa6b68814c2f3
bind-pkcs11-libs-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: a2e6e2735e21ca0475f89107758d329f4dbec547cfc1132fbe8c8d462e33e280
bind-pkcs11-utils-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: a8d44c9c2f10187268766982ae40b19d78e33088df3f41b233adc5dab0132de8
bind-sdb-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 0215327781f57010669bb91c8b7b9db726ad950373bf2b4ff10e484bb394c519
bind-sdb-chroot-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: 13b47f68ad2eb1a6c43035b6a0af698760e7043c6844764f3bd7ef55ed54f018
bind-utils-9.11.4-26.P2.el7_9.22.s390x.rpm SHA-256: e81b1278ee68a2c4920f9b797519a55ff9fd08c35f33c7c16610c8268339b9a3

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
bind-9.11.4-26.P2.el7_9.22.src.rpm SHA-256: aa465c5b54f5abb66d9d320e16a7f3748824a515e99f415ba5029777c875cae5
ppc64
bind-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: cb475e42c413e8a8723bda3584cb1ad608706e1037a5928f22d7bc2f44606a04
bind-chroot-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: 8e3a2cd762e1df04d330517fbfe18341513f73ba846b2b8978861e4f546b3482
bind-debuginfo-9.11.4-26.P2.el7_9.22.ppc.rpm SHA-256: d86b7fee608c324c7789a61a7f0193dbbb8ff7cd09eb1d2d32b603f06e632a11
bind-debuginfo-9.11.4-26.P2.el7_9.22.ppc.rpm SHA-256: d86b7fee608c324c7789a61a7f0193dbbb8ff7cd09eb1d2d32b603f06e632a11
bind-debuginfo-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: 76f872d7c9a8efa1b7d703c675f8fd701c3e67e378db04ebaa3e34801945a9c6
bind-debuginfo-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: 76f872d7c9a8efa1b7d703c675f8fd701c3e67e378db04ebaa3e34801945a9c6
bind-devel-9.11.4-26.P2.el7_9.22.ppc.rpm SHA-256: 787daf15e5251658d2f6423f51d1af3d72504e89b7dd912dbd508379022ccfab
bind-devel-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: ad429e7f78b98c57768d014730bc8251c3d038cd824b879d2c5d01972ba62773
bind-export-devel-9.11.4-26.P2.el7_9.22.ppc.rpm SHA-256: ee6b56765542c7ff000a51f02623a8d1484eb14290e0efad917ed3800d2daf71
bind-export-devel-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: d72bf5b9a9d6e0123aa3a1f1004063313f5ab9fe7812f8e9c9a1662906395e25
bind-export-libs-9.11.4-26.P2.el7_9.22.ppc.rpm SHA-256: 2c82d0d40319b421dc59935088bbbb03dff824a2ff6779812c8b8a9606d19235
bind-export-libs-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: ec855cb4614fc9ed94d44613927ef71618c844057665b25f9c25a4f687e2c9d7
bind-libs-9.11.4-26.P2.el7_9.22.ppc.rpm SHA-256: 61c230a670067325c201649e40ab3812f987a3a65303aa8275b167cb2f36e439
bind-libs-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: 79176f5fc1c8112ae4b573b22e6a08cde269cf3e44bcf80bce31793f27b19744
bind-libs-lite-9.11.4-26.P2.el7_9.22.ppc.rpm SHA-256: 7761670ac4711d1a42145a83ca2d910f7cd252e6e1afd0e151c83d789c7ff733
bind-libs-lite-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: fca95fad28de248458d0eb86965fa5b03ee19f530a096514fabe695ebc2a6786
bind-license-9.11.4-26.P2.el7_9.22.noarch.rpm SHA-256: 40e9ce8e97f48a56d5a55096fafa172563ff5f7f9ad1b8f26a4af12b5f8d6c4a
bind-lite-devel-9.11.4-26.P2.el7_9.22.ppc.rpm SHA-256: 51d1abf76a00ddf08230fef1df6780af085c70e9da354616ef7459d1bb034291
bind-lite-devel-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: bac434e0acc3144fb1c1e0f94ed3adce361efd884ba3e0214c363926f4f2f929
bind-pkcs11-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: 74c8e7c3e2f65dc1f8379e8027de0e11a84edc37244c923befd18c8ed08780df
bind-pkcs11-devel-9.11.4-26.P2.el7_9.22.ppc.rpm SHA-256: c6f88052a5cfcb2c8399466464df212201b4d7312d7beb7339065ec7a46399e8
bind-pkcs11-devel-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: d83ce50c2f4c01bc957fad31434612a83798eb79e378f935ee7dd4b6b556ad76
bind-pkcs11-libs-9.11.4-26.P2.el7_9.22.ppc.rpm SHA-256: 0fa6891fe86458fb8992dab69d241c321638801720b19f1856fcd292a89c459f
bind-pkcs11-libs-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: 5833bbc35d2d0dea5d062496010e3075e8c54d63ab257d34ea8f78b4220d4cb3
bind-pkcs11-utils-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: fbf6e4d755126e75f6c1e5d2a5a01f78b7c7b05b907af516a31e0963e688e3f5
bind-sdb-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: 15fc39e1010a9c6d5bab690d1a931fafa52952a693608ed4d705122da05f1499
bind-sdb-chroot-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: ab67b0cb30895c735d4a9e1f7e754b7ceb2380b82c6ed55d218ef468500a875b
bind-utils-9.11.4-26.P2.el7_9.22.ppc64.rpm SHA-256: 01b86db987084b9b931639caefba0c89682ece50aab8a5707f7e61332abf61cd

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
bind-9.11.4-26.P2.el7_9.22.src.rpm SHA-256: aa465c5b54f5abb66d9d320e16a7f3748824a515e99f415ba5029777c875cae5
ppc64le
bind-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 10b9b1bc3ccec6b445dbf5912c1f2d57963b2e2b2021ca2e07eec1834b6607ba
bind-chroot-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 9f7ded2757e2d8ebbfac52202ec9b53e624cfc346a17544d9a777eb355988f48
bind-debuginfo-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 11b491714bfbf7ce865c748698d379354a6de38c6746e6fb55ccc60612d55d9a
bind-debuginfo-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 11b491714bfbf7ce865c748698d379354a6de38c6746e6fb55ccc60612d55d9a
bind-devel-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 96d6a7c41da3414662e0b5f99cd2bed282c2bbe4679b103c3aed3b0398a83a59
bind-export-devel-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 4dcf2f27d7263617e64861d4c10fb90d6ddc60b4323ce2e5b6938640d32a620e
bind-export-libs-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 76e5962167fa7286ccbdb5cca93a23f852dc5ecc5ec0c62ad6121a1a758da65e
bind-libs-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: ccc33caac35722e5ec5e1b7152a1a7fb7119f8f8ab0c3b9b7c3cf5a4bf5adb81
bind-libs-lite-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 8888d87c591d8f22da55f88cfb64c1c45c3879a64246a6671d8226cecf13cb96
bind-license-9.11.4-26.P2.el7_9.22.noarch.rpm SHA-256: 40e9ce8e97f48a56d5a55096fafa172563ff5f7f9ad1b8f26a4af12b5f8d6c4a
bind-lite-devel-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: fbd59687bd06dcc686bf222606680823c5d38b65c375d1369db32180e21057d7
bind-pkcs11-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 8dc3cb7a7e697c208774ae259bae378b513cac3cdd88ac356c5d8ce3eb02d9d8
bind-pkcs11-devel-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 66c03c3ccbf7240c0ff0a63fdf5b405000a80dc8f4a369e1856a3317a303297a
bind-pkcs11-libs-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: d53ccbe4b4860e9bd5d7bc1005b3d8ebe0716dd6d7187e660c78f1f0a9e156ec
bind-pkcs11-utils-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: 1b693f0b604180d992bf1427eb90a990d862ba56cf03f2213094e95db9dc6b97
bind-sdb-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: dd355e0c87563c9971c63d7f69aae7c655485dd4902a4445f736b7368e49eb54
bind-sdb-chroot-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: a449cf825a4e00211256fd13a4b83cbaca256c4d321b89a5f9f7d2840eb8dd4a
bind-utils-9.11.4-26.P2.el7_9.22.ppc64le.rpm SHA-256: de1a2f88feb4926374dd1433bc085d5f62ce1df86a58d20521a4686b7be4810c

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.