{"id":"CLSA-2026-1785489780","summary":"bind: Fix of 6 CVEs","details":"- CVE-2026-11331: return from RPZ wildcard CNAME expansion when the resulting\n  name is too long instead of continuing with an invalid name\n- CVE-2026-11721: reject RRSIG records whose Labels field is smaller than the\n  signer's label count, and skip out-of-zone nodes in dnssec-signzone\n- CVE-2026-13321: reject NSEC RRsets containing a record whose Next Domain Name\n  points outside the signer's zone\n- CVE-2026-10723: require the NSEC3 signer name to equal the zone apex derived\n  from the NSEC3 owner name\n- CVE-2026-13204: only accept an NSEC/NSEC3 denial record that has a matching\n  RRSIG, and propagate the failure instead of asserting\n- CVE-2026-11622: reference count cache RRset headers so superseded generations\n  are reclaimed without waiting for the owning node to become unreferenced","modified":"2026-10-26T09:43:24.399223489Z","published":"2026-07-31T09:23:14Z","upstream":["CVE-2026-10723","CVE-2026-11331","CVE-2026-11622","CVE-2026-11721","CVE-2026-13204","CVE-2026-13321"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785489780.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10723"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11331"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11622"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11721"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13204"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13321"}],"affected":[{"package":{"name":"bind","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/bind?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785489780.json"}},{"package":{"name":"bind-chroot","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/bind-chroot?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785489780.json"}},{"package":{"name":"bind-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/bind-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785489780.json"}},{"package":{"name":"bind-dnssec-doc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/bind-dnssec-doc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785489780.json"}},{"package":{"name":"bind-dnssec-utils","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/bind-dnssec-utils?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785489780.json"}},{"package":{"name":"bind-doc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/bind-doc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785489780.json"}},{"package":{"name":"bind-libs","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/bind-libs?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785489780.json"}},{"package":{"name":"bind-license","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/bind-license?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785489780.json"}},{"package":{"name":"bind-utils","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/bind-utils?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785489780.json"}},{"package":{"name":"python3-bind","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/python3-bind?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1785489780.json"}}],"schema_version":"1.9.0"}