Red Hat Product Errata RHSA-2026:98637 - Security Advisory
Issued:
2026-11-11
Updated:
2026-11-11

RHSA-2026:98637 - Security Advisory

Synopsis

Important: bind security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for bind is now available for Red Hat Enterprise Linux 10.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630)
  • bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300)
  • bind: bind: Denial of Service via assertion failure during redirect processing (CVE-2026-96888)
  • bind: bind: Denial of service via assertion failure in RPZ query processing (CVE-2026-97313)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 10 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x

Fixes

  • BZ - 2556406 - CVE-2026-19630 bind: BIND: Denial of Service via unbounded processing of crafted DNS messages
  • BZ - 2556407 - CVE-2026-94300 bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay
  • BZ - 2556413 - CVE-2026-96888 bind: bind: Denial of Service via assertion failure during redirect processing
  • BZ - 2556415 - CVE-2026-97313 bind: bind: Denial of service via assertion failure in RPZ query processing

Red Hat Enterprise Linux for x86_64 10

SRPM
bind-9.18.33-30.el10_3.1.src.rpm SHA-256: 59b9d1f451f99b1e3d2f2fcf25af839bdf4434c988248bd0ae2b30b1bda49a8c
x86_64
bind-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: e99097ba939dc1987cff0427582bea4b25ed628f0ca8d5575b8dfd9681b97f2a
bind-chroot-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 0d98ae2da57a738de11fa6a8949f85ce1e449ffda163d7e2169a80143689a8a8
bind-debuginfo-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 672279b3ae9ce35e80420652d582e72d88228cfed4cf35d250fa356b277fbd97
bind-debugsource-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 1c98a1c12755751760f1971a3b51feed93968841b9c168a1930c17e4cf7fecad
bind-dnssec-utils-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 2eb0222cbb5b0930c0eb00afa00ac9a50fee2d1cbcf6747a549492e20bb9fd94
bind-dnssec-utils-debuginfo-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 19d45f935f781cd60cd5be0fd1ba90948fddc8b99b8a922d88dfc1d7882230e5
bind-libs-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: d229a2ca981b1f1f2f391d636d292ecf6716db9d45f988fe341675276c9739a9
bind-libs-debuginfo-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 789be947a19320fe7ebe08766603fb9cf914d76b7cfa50cc412a74dbc706072d
bind-license-9.18.33-30.el10_3.1.noarch.rpm SHA-256: c27548981ad32fb00722105d174792e9de91eedb56e07e2811b18a3216291117
bind-utils-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 02a6e62581df61450cba9a41ecc1a5e74e7e33afb326fabe2ae7a8498e25efdd
bind-utils-debuginfo-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 6768dfec7cd30b28721d1720099f48ea58fdf4f0a261c476ac2f2ce0974320cc

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
bind-9.18.33-30.el10_3.1.src.rpm SHA-256: 59b9d1f451f99b1e3d2f2fcf25af839bdf4434c988248bd0ae2b30b1bda49a8c
s390x
bind-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 2053e42268552a4de3ba4191ba829b12dd9d49835cdb7b88ae135e2da8e84af4
bind-chroot-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 3ffce580ccfd320d86c4282ac2b0df206cc9f63591788f56cb954acef3c63291
bind-debuginfo-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 5472e8880a3ae5ffde2479b34541894fcb81c503e7dd3eaa16c3690ee8a8adfb
bind-debugsource-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 34d92be75545ba19bdfcf71c71a464151c62bde358c88b839e7e41cb9163cde6
bind-dnssec-utils-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 1b859f5968e783a19512b87e190eb0d300fa1e572e0be0853f49c4cc95150d22
bind-dnssec-utils-debuginfo-9.18.33-30.el10_3.1.s390x.rpm SHA-256: d7461d50ff5d25dbc36239b56c5076a68fc86117e0211b799e830b0dd5652880
bind-libs-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 28291f50e4d4f23fb3ed03bfb44abac372e29b6784b1baea77a1157c193e2862
bind-libs-debuginfo-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 0230a1930d863aa5cac0c5cf72fab6f2d69a491e396874c5e11d7fa302de64be
bind-license-9.18.33-30.el10_3.1.noarch.rpm SHA-256: c27548981ad32fb00722105d174792e9de91eedb56e07e2811b18a3216291117
bind-utils-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 8e4e7e25fec8e68e32e63bfb61880260349a9c4a55201780b33a45b3d7f2f14f
bind-utils-debuginfo-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 902ac3c1fd1d8173ce0dc1f6d3c62c7e4f7919720b2cab7c1e9ad66c1bb89ce2

Red Hat Enterprise Linux for Power, little endian 10

SRPM
bind-9.18.33-30.el10_3.1.src.rpm SHA-256: 59b9d1f451f99b1e3d2f2fcf25af839bdf4434c988248bd0ae2b30b1bda49a8c
ppc64le
bind-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 49ab6f97a0d6fffe03faac3b268673384d99f7776fa3749fdd52f3cddae75c2d
bind-chroot-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: de9695ff0c90a8594eb7f5c4e0af17a5ca60e3a1a0d92bb9933c4c030f95b380
bind-debuginfo-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 2617ba3bed6738ff952d7de5852c2aa17e2fdde01190c61fbcfe428e6ec0f4fe
bind-debugsource-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 53c591cfb7cb6cb9655c004d508cd063eb652a5cc176882913ae460a26aebd32
bind-dnssec-utils-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: c62220cd7befcd5a0d87c37225c18188e6129a4efec4a659e4aedfb200929515
bind-dnssec-utils-debuginfo-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 193dec07c390aa266b42bff4660ec4a8cb6488495fbec886c0d16c7581239b84
bind-libs-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 1f558c51a1356fad9be060b8836f1c37669a2267ed2c40a2afeb20381a201c88
bind-libs-debuginfo-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 77198e2bee2cf65676554d6fac1d173876de8ea32b5131f3c601e7af955fd972
bind-license-9.18.33-30.el10_3.1.noarch.rpm SHA-256: c27548981ad32fb00722105d174792e9de91eedb56e07e2811b18a3216291117
bind-utils-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 662fea12d84b93aa6a0682d5653d3d64d742062ef085c22990c87a04799c339f
bind-utils-debuginfo-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 0cf5f95884c2ce178b678800c4f5925834b25af681835e14b630e265a8bcd28a

Red Hat Enterprise Linux for ARM 64 10

SRPM
bind-9.18.33-30.el10_3.1.src.rpm SHA-256: 59b9d1f451f99b1e3d2f2fcf25af839bdf4434c988248bd0ae2b30b1bda49a8c
aarch64
bind-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: d7158b63cdef899890e7979c99901fa0eb3d191d1b099ad6e37417beaa18c5d4
bind-chroot-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 000b0b06a216da772164f78855bc61f864e3aa92d4228e448c0534e491afca99
bind-debuginfo-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 946aa7bb9c7e8d1e34dc58b81fd1f61c1c1d7b3f5435c6eee47aab4a3cab25de
bind-debugsource-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 00cff1866ce5806da2fceb93c655fe19836b82db1caac9a5d754ca9dac457bed
bind-dnssec-utils-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: b1c3186f390f038f213588e0498a4843a2e228e001bc80967eb7c3154e2050b8
bind-dnssec-utils-debuginfo-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 851db6a0d77ccddd932a5bbc488ce376bb7116e940fbbb91492d2c90ee741230
bind-libs-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: b53158802a2b67c59fb12aee09dcedd253ac64b26419d8b8a3a9bbcbb3e74faa
bind-libs-debuginfo-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 170c469af749dde0a07cb9e6f1c0a812ee0cb51ce9a5b58a2026c25ae41cfd54
bind-license-9.18.33-30.el10_3.1.noarch.rpm SHA-256: c27548981ad32fb00722105d174792e9de91eedb56e07e2811b18a3216291117
bind-utils-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 498b7430e135b1f44f4ca50c4dcd325409e8076e30082bf2e772f3eba3861a04
bind-utils-debuginfo-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 552270bb9cd323389d2e4c09852a2c665fe1e649f57d1d9b0169662d31dea5d6

Red Hat CodeReady Linux Builder for x86_64 10

SRPM
x86_64
bind-debuginfo-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 672279b3ae9ce35e80420652d582e72d88228cfed4cf35d250fa356b277fbd97
bind-debugsource-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 1c98a1c12755751760f1971a3b51feed93968841b9c168a1930c17e4cf7fecad
bind-devel-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 2730edb4ee15fc476fa717f40ea0e02ac491ba135a7f0148d9f1c63363e9f4e2
bind-dnssec-utils-debuginfo-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 19d45f935f781cd60cd5be0fd1ba90948fddc8b99b8a922d88dfc1d7882230e5
bind-doc-9.18.33-30.el10_3.1.noarch.rpm SHA-256: 2dedb927cbf66cd50604d6350a5120c78c8679e3b2bbe74261cd7ad798651457
bind-libs-debuginfo-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 789be947a19320fe7ebe08766603fb9cf914d76b7cfa50cc412a74dbc706072d
bind-utils-debuginfo-9.18.33-30.el10_3.1.x86_64.rpm SHA-256: 6768dfec7cd30b28721d1720099f48ea58fdf4f0a261c476ac2f2ce0974320cc

Red Hat CodeReady Linux Builder for Power, little endian 10

SRPM
ppc64le
bind-debuginfo-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 2617ba3bed6738ff952d7de5852c2aa17e2fdde01190c61fbcfe428e6ec0f4fe
bind-debugsource-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 53c591cfb7cb6cb9655c004d508cd063eb652a5cc176882913ae460a26aebd32
bind-devel-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: d8f5e113c881d9134894553c7eb428674a004f44d42525362d95588c2ea303e3
bind-dnssec-utils-debuginfo-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 193dec07c390aa266b42bff4660ec4a8cb6488495fbec886c0d16c7581239b84
bind-doc-9.18.33-30.el10_3.1.noarch.rpm SHA-256: 2dedb927cbf66cd50604d6350a5120c78c8679e3b2bbe74261cd7ad798651457
bind-libs-debuginfo-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 77198e2bee2cf65676554d6fac1d173876de8ea32b5131f3c601e7af955fd972
bind-utils-debuginfo-9.18.33-30.el10_3.1.ppc64le.rpm SHA-256: 0cf5f95884c2ce178b678800c4f5925834b25af681835e14b630e265a8bcd28a

Red Hat CodeReady Linux Builder for ARM 64 10

SRPM
aarch64
bind-debuginfo-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 946aa7bb9c7e8d1e34dc58b81fd1f61c1c1d7b3f5435c6eee47aab4a3cab25de
bind-debugsource-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 00cff1866ce5806da2fceb93c655fe19836b82db1caac9a5d754ca9dac457bed
bind-devel-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 9f022cc9862e95d9e5ab6277b815f085bc1a1441a669f01e1ec60c5701802330
bind-dnssec-utils-debuginfo-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 851db6a0d77ccddd932a5bbc488ce376bb7116e940fbbb91492d2c90ee741230
bind-doc-9.18.33-30.el10_3.1.noarch.rpm SHA-256: 2dedb927cbf66cd50604d6350a5120c78c8679e3b2bbe74261cd7ad798651457
bind-libs-debuginfo-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 170c469af749dde0a07cb9e6f1c0a812ee0cb51ce9a5b58a2026c25ae41cfd54
bind-utils-debuginfo-9.18.33-30.el10_3.1.aarch64.rpm SHA-256: 552270bb9cd323389d2e4c09852a2c665fe1e649f57d1d9b0169662d31dea5d6

Red Hat CodeReady Linux Builder for IBM z Systems 10

SRPM
s390x
bind-debuginfo-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 5472e8880a3ae5ffde2479b34541894fcb81c503e7dd3eaa16c3690ee8a8adfb
bind-debugsource-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 34d92be75545ba19bdfcf71c71a464151c62bde358c88b839e7e41cb9163cde6
bind-devel-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 06164e4c35453f4732c293c6939df4c8f0354e9e0bdc860a3e5af2af884b580f
bind-dnssec-utils-debuginfo-9.18.33-30.el10_3.1.s390x.rpm SHA-256: d7461d50ff5d25dbc36239b56c5076a68fc86117e0211b799e830b0dd5652880
bind-doc-9.18.33-30.el10_3.1.noarch.rpm SHA-256: 2dedb927cbf66cd50604d6350a5120c78c8679e3b2bbe74261cd7ad798651457
bind-libs-debuginfo-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 0230a1930d863aa5cac0c5cf72fab6f2d69a491e396874c5e11d7fa302de64be
bind-utils-debuginfo-9.18.33-30.el10_3.1.s390x.rpm SHA-256: 902ac3c1fd1d8173ce0dc1f6d3c62c7e4f7919720b2cab7c1e9ad66c1bb89ce2

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.