Red Hat Product Errata RHSA-2026:98497 - Security Advisory
Issued:
2026-11-11
Updated:
2026-11-11

RHSA-2026:98497 - Security Advisory

Synopsis

Important: bind security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for bind is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630)
  • bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300)
  • bind: bind: Denial of Service via assertion failure during redirect processing (CVE-2026-96888)
  • bind: bind: Denial of service via assertion failure in RPZ query processing (CVE-2026-97313)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 9 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x

Fixes

  • BZ - 2556406 - CVE-2026-19630 bind: BIND: Denial of Service via unbounded processing of crafted DNS messages
  • BZ - 2556407 - CVE-2026-94300 bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay
  • BZ - 2556413 - CVE-2026-96888 bind: bind: Denial of Service via assertion failure during redirect processing
  • BZ - 2556415 - CVE-2026-97313 bind: bind: Denial of service via assertion failure in RPZ query processing

Red Hat Enterprise Linux for x86_64 9

SRPM
bind-9.16.50-12.el9_9.1.src.rpm SHA-256: 72a46756ee191731a76178094bdf261d3f95e324b1a0e9523ceb54da20c491b8
x86_64
bind-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: a4161bc65ef9623eaeb92a10cb6dab32c2b32a5443772825e8620491fb512b0e
bind-chroot-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: 6aa8e978a7202bb37843fec1cee46bc9e55a6b400a11a1a2be3df3479f87b5eb
bind-debuginfo-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: cba12c8ff52a426b2c2f455f8daa0c6049527bb3af036272650a7f7ee8bac994
bind-debugsource-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: 86a444b4889accd77ac243733deda7a4007d96ba74e8d7778f0fd724c0350ee2
bind-dnssec-doc-9.16.50-12.el9_9.1.noarch.rpm SHA-256: da8831b6b49710ab1eca365f09da56d34cb628eecf36321a028cc8d6ec16c609
bind-dnssec-utils-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: 31619436e80b5d727a00b53d9b88407be6c320b1fd964ebe9d28f159f7098ab8
bind-dnssec-utils-debuginfo-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: 83799ce9c703ab18edbf9ae460d1c70f1a1bbb403fcf4a25b3e550a193fb5e3c
bind-libs-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: 983c6e747995683664e963ee2100c24d31e253aa8f2336df7ab42f86a029a0b7
bind-libs-debuginfo-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: 69344afe6c0359daae740fd65ffd7af23a4e2b9f8d279b2b18382e9c01776a6e
bind-license-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 86fa699f33fc52b6973254e1307efdc518815f577bb234cd34a8458d6db6bea0
bind-utils-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: 83b24fb49c562df639ff0791a1fd7b791d374fb2d9dd98e8733af4fd46788f1a
bind-utils-debuginfo-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: bdee6cc54b2d8e26576ce1dc4a38a948872204217ac8723ae1c0d2bc78fd8af1
python3-bind-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 2d4349febf0ce761d69ea19c793b460913c176c49665166680711a1fe1048c8e

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
bind-9.16.50-12.el9_9.1.src.rpm SHA-256: 72a46756ee191731a76178094bdf261d3f95e324b1a0e9523ceb54da20c491b8
s390x
bind-9.16.50-12.el9_9.1.s390x.rpm SHA-256: b72bcc3c2dc76bdb4103781902212970922e161bf1bb7f29d3d9f22a212599c0
bind-chroot-9.16.50-12.el9_9.1.s390x.rpm SHA-256: e1c0602c3a7b8a5906bf6ddf1bfdedc00cc4b1c86989974da87ab1b40d1b51ef
bind-debuginfo-9.16.50-12.el9_9.1.s390x.rpm SHA-256: 6df36f83dfab8351b848ad6090f4cf2300f38f1b64dba8b944948383ba15328f
bind-debugsource-9.16.50-12.el9_9.1.s390x.rpm SHA-256: 15ff697440d43d43bf0a76f558db69e38d2676104e211cc796a3af8259a644e7
bind-dnssec-doc-9.16.50-12.el9_9.1.noarch.rpm SHA-256: da8831b6b49710ab1eca365f09da56d34cb628eecf36321a028cc8d6ec16c609
bind-dnssec-utils-9.16.50-12.el9_9.1.s390x.rpm SHA-256: 4824b2efba3ecaee8ded4f1214c02137410ec62808c69cc3e5f0b027486f223f
bind-dnssec-utils-debuginfo-9.16.50-12.el9_9.1.s390x.rpm SHA-256: c5d2459cc0ec573f37b9fd40d3808e212b117283f2d8a056c5afe11f42024e29
bind-libs-9.16.50-12.el9_9.1.s390x.rpm SHA-256: 399950ebf840c201ee272fbee4a5883dcc6d46fb6bcf18fb517687e93e483724
bind-libs-debuginfo-9.16.50-12.el9_9.1.s390x.rpm SHA-256: d0568c5b69eb12e750704e83d5cfe55ad5f618acb20f83f804983e1899aa33ac
bind-license-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 86fa699f33fc52b6973254e1307efdc518815f577bb234cd34a8458d6db6bea0
bind-utils-9.16.50-12.el9_9.1.s390x.rpm SHA-256: 78ef3c2b46ed4cc75fb28f84fc5f9062ba9153f38097c221f5630a2cbe57df58
bind-utils-debuginfo-9.16.50-12.el9_9.1.s390x.rpm SHA-256: 16d01df01ee15a308bb273275ec587c97169211fb47a56d6acf2e81846549cdb
python3-bind-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 2d4349febf0ce761d69ea19c793b460913c176c49665166680711a1fe1048c8e

Red Hat Enterprise Linux for Power, little endian 9

SRPM
bind-9.16.50-12.el9_9.1.src.rpm SHA-256: 72a46756ee191731a76178094bdf261d3f95e324b1a0e9523ceb54da20c491b8
ppc64le
bind-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 412a7501e5b89d4fa05a8947ed6055bbeb90d378c4484cf316db2288fcaf9950
bind-chroot-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 218b03489cea1d07f707c26d9a40e6c72a6ed11c325eac2ad3ad2d884c16dd7c
bind-debuginfo-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 5ce2dbd9ddd604b751ee87ca2c2af6c3a6dd627264a418db61e2b8df89202083
bind-debugsource-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 26f200f4232fdab0ad4b767f36164ca052b7cd3ad94ede3de85d0233c7fa980e
bind-dnssec-doc-9.16.50-12.el9_9.1.noarch.rpm SHA-256: da8831b6b49710ab1eca365f09da56d34cb628eecf36321a028cc8d6ec16c609
bind-dnssec-utils-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: f55690459a0882cdafa9c89cdab9083cfd84d395a24b3740d646946c6e5e5d2b
bind-dnssec-utils-debuginfo-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 049e047428993089a7c739611e9d8cfdff33bcc58119c9cf23d1723fbf8880a0
bind-libs-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 86aa279219c5969dce211310cd54c3847881acf2f9263275fa5f18d64f425165
bind-libs-debuginfo-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 9494e9f5014a9cc2abde931e658c7d3e0ee9d6304f953026d6a98a3aa32795e0
bind-license-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 86fa699f33fc52b6973254e1307efdc518815f577bb234cd34a8458d6db6bea0
bind-utils-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: aff1ff7c4e15ed8222ed7e285eb45a575e982d10ecc71db41ba6215a66a159dc
bind-utils-debuginfo-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 195e1d88a7336a953124d2b89b38f7a5749f20a27752d2a1849c655a445aaa99
python3-bind-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 2d4349febf0ce761d69ea19c793b460913c176c49665166680711a1fe1048c8e

Red Hat Enterprise Linux for ARM 64 9

SRPM
bind-9.16.50-12.el9_9.1.src.rpm SHA-256: 72a46756ee191731a76178094bdf261d3f95e324b1a0e9523ceb54da20c491b8
aarch64
bind-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: cda4aad36f9fcc52e3628a15b4e5f28b81b271ff740b98c1e76c12d92eb1fc26
bind-chroot-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 1318d617b32c87d88dbcb96988d666c70cd8af07fdfd519f2ea1e7d4a06de2ae
bind-debuginfo-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: f555c346863caf4b3ca4073419d8cd1a3e353dd454018ad95d0d9d24ac37a7b3
bind-debugsource-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 625b28d45a825a10242df9e0127246eeb96860f2753b030c554e14c74c361f38
bind-dnssec-doc-9.16.50-12.el9_9.1.noarch.rpm SHA-256: da8831b6b49710ab1eca365f09da56d34cb628eecf36321a028cc8d6ec16c609
bind-dnssec-utils-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 03fe80d325cb8468354f941df22e7bac3fa2e139729060e421c6f25c0c0cbdfe
bind-dnssec-utils-debuginfo-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 563cc7510ea0e15126b3b9dfa227e417054e1ff52342c4038c9cbbbf4e19c239
bind-libs-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 06e2dcdea0b395e5263e06ef6255a74c602fbc3d58173ec8f4c4a4c2d110076a
bind-libs-debuginfo-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 9a4077d2d9236c4280fd044e64c7504477e7d2f5ebf7a56f31865ad32bb1ee44
bind-license-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 86fa699f33fc52b6973254e1307efdc518815f577bb234cd34a8458d6db6bea0
bind-utils-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 6db078184d13bdeb40c6fc00c11aec8852c36c9d02a464a1973068cd6932dfe3
bind-utils-debuginfo-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 587aae0cac3a1f7670d854ec5e4410b7fde47247abbf749e3063f59788618378
python3-bind-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 2d4349febf0ce761d69ea19c793b460913c176c49665166680711a1fe1048c8e

Red Hat CodeReady Linux Builder for x86_64 9

SRPM
x86_64
bind-debuginfo-9.16.50-12.el9_9.1.i686.rpm SHA-256: 13dde43f540e642059ca68b8ded9e4e91011658ab010e2ad4d80be2571022a86
bind-debuginfo-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: cba12c8ff52a426b2c2f455f8daa0c6049527bb3af036272650a7f7ee8bac994
bind-debugsource-9.16.50-12.el9_9.1.i686.rpm SHA-256: 1df71739a75ab4de48d36b6471522321b69bfbaef0858763b14083e304302cf9
bind-debugsource-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: 86a444b4889accd77ac243733deda7a4007d96ba74e8d7778f0fd724c0350ee2
bind-devel-9.16.50-12.el9_9.1.i686.rpm SHA-256: e50ab97d07761658f2cd0407e524bae403a29da8b610087a5cf668b8067428d2
bind-devel-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: f7554a7e1cedc158c2fb55bea5c08391fd37fbca2286e695e6ecfe71d73bdc18
bind-dnssec-utils-debuginfo-9.16.50-12.el9_9.1.i686.rpm SHA-256: c871260928bf3931bbbec4b412612f772a3c88938f874721e95b98f326ca62b0
bind-dnssec-utils-debuginfo-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: 83799ce9c703ab18edbf9ae460d1c70f1a1bbb403fcf4a25b3e550a193fb5e3c
bind-doc-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 0391963d306eed062a7f240ac8c697444518fdf4c58c6678d817455c71f0e27c
bind-libs-9.16.50-12.el9_9.1.i686.rpm SHA-256: 1327744e4f40a5a160d2ee5b99e7939307a768d35ede664049b75523e49efa8e
bind-libs-debuginfo-9.16.50-12.el9_9.1.i686.rpm SHA-256: 077eaaafbf6f12a0b6ae9de97e4f7791e355e200ea86b2855207799770d51a7e
bind-libs-debuginfo-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: 69344afe6c0359daae740fd65ffd7af23a4e2b9f8d279b2b18382e9c01776a6e
bind-utils-debuginfo-9.16.50-12.el9_9.1.i686.rpm SHA-256: 8abdbb275a7ded78c9da4c0d9ee282a5d149d8e06bc66045c97cd36009dcf130
bind-utils-debuginfo-9.16.50-12.el9_9.1.x86_64.rpm SHA-256: bdee6cc54b2d8e26576ce1dc4a38a948872204217ac8723ae1c0d2bc78fd8af1

Red Hat CodeReady Linux Builder for Power, little endian 9

SRPM
ppc64le
bind-debuginfo-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 5ce2dbd9ddd604b751ee87ca2c2af6c3a6dd627264a418db61e2b8df89202083
bind-debugsource-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 26f200f4232fdab0ad4b767f36164ca052b7cd3ad94ede3de85d0233c7fa980e
bind-devel-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 926726aae77d14bfeec2884f757c68121d5f5cb86997610570d0e3d7c661a4eb
bind-dnssec-utils-debuginfo-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 049e047428993089a7c739611e9d8cfdff33bcc58119c9cf23d1723fbf8880a0
bind-doc-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 0391963d306eed062a7f240ac8c697444518fdf4c58c6678d817455c71f0e27c
bind-libs-debuginfo-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 9494e9f5014a9cc2abde931e658c7d3e0ee9d6304f953026d6a98a3aa32795e0
bind-utils-debuginfo-9.16.50-12.el9_9.1.ppc64le.rpm SHA-256: 195e1d88a7336a953124d2b89b38f7a5749f20a27752d2a1849c655a445aaa99

Red Hat CodeReady Linux Builder for ARM 64 9

SRPM
aarch64
bind-debuginfo-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: f555c346863caf4b3ca4073419d8cd1a3e353dd454018ad95d0d9d24ac37a7b3
bind-debugsource-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 625b28d45a825a10242df9e0127246eeb96860f2753b030c554e14c74c361f38
bind-devel-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 89836c2c30651cd45360a686af5032054e25eebdd8efe28d8a0f36028b13d787
bind-dnssec-utils-debuginfo-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 563cc7510ea0e15126b3b9dfa227e417054e1ff52342c4038c9cbbbf4e19c239
bind-doc-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 0391963d306eed062a7f240ac8c697444518fdf4c58c6678d817455c71f0e27c
bind-libs-debuginfo-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 9a4077d2d9236c4280fd044e64c7504477e7d2f5ebf7a56f31865ad32bb1ee44
bind-utils-debuginfo-9.16.50-12.el9_9.1.aarch64.rpm SHA-256: 587aae0cac3a1f7670d854ec5e4410b7fde47247abbf749e3063f59788618378

Red Hat CodeReady Linux Builder for IBM z Systems 9

SRPM
s390x
bind-debuginfo-9.16.50-12.el9_9.1.s390x.rpm SHA-256: 6df36f83dfab8351b848ad6090f4cf2300f38f1b64dba8b944948383ba15328f
bind-debugsource-9.16.50-12.el9_9.1.s390x.rpm SHA-256: 15ff697440d43d43bf0a76f558db69e38d2676104e211cc796a3af8259a644e7
bind-devel-9.16.50-12.el9_9.1.s390x.rpm SHA-256: ee0c8843a1bd3d664756e5a83c0abd3baa797413ed42248b4f83d16863c48c41
bind-dnssec-utils-debuginfo-9.16.50-12.el9_9.1.s390x.rpm SHA-256: c5d2459cc0ec573f37b9fd40d3808e212b117283f2d8a056c5afe11f42024e29
bind-doc-9.16.50-12.el9_9.1.noarch.rpm SHA-256: 0391963d306eed062a7f240ac8c697444518fdf4c58c6678d817455c71f0e27c
bind-libs-debuginfo-9.16.50-12.el9_9.1.s390x.rpm SHA-256: d0568c5b69eb12e750704e83d5cfe55ad5f618acb20f83f804983e1899aa33ac
bind-utils-debuginfo-9.16.50-12.el9_9.1.s390x.rpm SHA-256: 16d01df01ee15a308bb273275ec587c97169211fb47a56d6acf2e81846549cdb

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.