{"id":"CLSA-2026-1787734642","summary":"bind: Fix of 6 CVEs","details":"- CVE-2026-11331: return from RPZ wildcard CNAME expansion when the resulting\n  name is too long instead of continuing with an invalid name\n- CVE-2026-11721: reject RRSIG records whose Labels field is smaller than the\n  signer's label count, and skip out-of-zone nodes in dnssec-signzone\n- CVE-2026-13321: reject NSEC RRsets containing a record whose Next Domain Name\n  points outside the signer's zone\n- CVE-2026-10723: require the NSEC3 signer name to equal the zone apex derived\n  from the NSEC3 owner name\n- CVE-2026-13204: only accept an NSEC/NSEC3 denial record that has a matching\n  RRSIG, and propagate the failure instead of asserting\n- CVE-2026-11622: reference count cache RRset headers so superseded generations\n  are reclaimed without waiting for the owning node to become unreferenced","modified":"2026-10-26T09:43:35.398564211Z","published":"2026-08-26T08:57:44Z","upstream":["CVE-2026-10723","CVE-2026-11331","CVE-2026-11622","CVE-2026-11721","CVE-2026-13204","CVE-2026-13321"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1787734642.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10723"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11331"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11622"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11721"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13204"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13321"}],"affected":[{"package":{"name":"bind","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bind?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1787734642.json"}},{"package":{"name":"bind-chroot","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bind-chroot?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1787734642.json"}},{"package":{"name":"bind-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bind-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1787734642.json"}},{"package":{"name":"bind-dnssec-doc","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bind-dnssec-doc?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1787734642.json"}},{"package":{"name":"bind-dnssec-utils","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bind-dnssec-utils?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1787734642.json"}},{"package":{"name":"bind-doc","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bind-doc?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1787734642.json"}},{"package":{"name":"bind-libs","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bind-libs?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1787734642.json"}},{"package":{"name":"bind-license","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bind-license?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1787734642.json"}},{"package":{"name":"bind-utils","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bind-utils?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1787734642.json"}},{"package":{"name":"python3-bind","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/python3-bind?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1787734642.json"}}],"schema_version":"1.9.0"}