A Denial of Service vulnerability (CVE-2026-1519, CVSS 7.5 HIGH) in BIND allows remote attackers to crash the named service via a maliciously crafted DNSSEC-validated zone. Affected versions include BIND 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, and 9.21.0 through 9.21.19. The flaw is remediated by upgrading to BIND 9.18.47, 9.20.21, or 9.21.20, respectively.
Red Hat Product Errata RHSA-2026:24934 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-11 RHSA-2026:24934 - Security Advisory Overview Updated Packages Synopsis Important: bind9.18 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for bind9.18 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2451305 - CVE-2026-1519 bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVEs CVE-2026-1519 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM bind9.18-9.18.29-4.el9_6.3.src.rpm SHA-256: aaaefda79000f147f92361f3ddc6f7a0361c297b771ad956f65aeba44974b1a2 x86_64 bind9.18-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 2cd2da27fee456925161c1068a59030734bd274486120e811c328a827e92b754 bind9.18-chroot-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: b72e1dc72b723a2a9334081c8421f11a593a7c5c665e75df432aedb54cca691a bind9.18-debuginfo-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 75995b2e10972544af02c237dfbb8fdcc610ad31868c7a84ea961bf2a064518d bind9.18-debugsource-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: a492770e6acbc3d5d4f3556003af1479f8d7c0f049e5ae603dcfb0641cdcf17d bind9.18-dnssec-utils-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 0a38b87405defe0b9339aedcf81136f6645c858ed6e8b4b1748ee39505a6ce3c bind9.18-dnssec-utils-debuginfo-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 2c6b0937681cdb86e70965628026a622757b86bd4ce3ab3f22df36de8c86cd8a bind9.18-libs-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: d0f1cba9ddd4ee0dd21e73e2a2c7baf6952160a73339f532b38d01247cfe9eb5 bind9.18-libs-debuginfo-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 5a9b5552c6d6ddc2ef10248adc67f6583123543e7be3e97f2dfd07ff54a33bec bind9.18-utils-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: b3eca02b6855d095c060d962a9ae0b143f860f258ff7589f7e8b10110b6d7597 bind9.18-utils-debuginfo-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 3b79d53b36ef4e3402c99f38ab2daf9a7e12b49b74bc0ffaa241fab3e4624a94 Red Hat Enterprise Linux Server - AUS 9.6 SRPM bind9.18-9.18.29-4.el9_6.3.src.rpm SHA-256: aaaefda79000f147f92361f3ddc6f7a0361c297b771ad956f65aeba44974b1a2 x86_64 bind9.18-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 2cd2da27fee456925161c1068a59030734bd274486120e811c328a827e92b754 bind9.18-chroot-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: b72e1dc72b723a2a9334081c8421f11a593a7c5c665e75df432aedb54cca691a bind9.18-debuginfo-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 75995b2e10972544af02c237dfbb8fdcc610ad31868c7a84ea961bf2a064518d bind9.18-debugsource-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: a492770e6acbc3d5d4f3556003af1479f8d7c0f049e5ae603dcfb0641cdcf17d bind9.18-dnssec-utils-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 0a38b87405defe0b9339aedcf81136f6645c858ed6e8b4b1748ee39505a6ce3c bind9.18-dnssec-utils-debuginfo-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 2c6b0937681cdb86e70965628026a622757b86bd4ce3ab3f22df36de8c86cd8a bind9.18-libs-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: d0f1cba9ddd4ee0dd21e73e2a2c7baf6952160a73339f532b38d01247cfe9eb5 bind9.18-libs-debuginfo-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 5a9b5552c6d6ddc2ef10248adc67f6583123543e7be3e97f2dfd07ff54a33bec bind9.18-utils-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: b3eca02b6855d095c060d962a9ae0b143f860f258ff7589f7e8b10110b6d7597 bind9.18-utils-debuginfo-9.18.29-4.el9_6.3.x86_64.rpm SHA-256: 3b79d53b36ef4e3402c99f38ab2daf9a7e12b49b74bc0ffaa241fab3e4624a94 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM bind9.18-9.18.29-4.el9_6.3.src.rpm SHA-256: aaaefda79000f147f92361f3ddc6f7a0361c297b771ad956f65aeba44974b1a2 s390x bind9.18-9.18.29-4.el9_6.3.s390x.rpm SHA-256: c81905d26bddbc358fcb04cc4bd471b31ea687da1858ae6170f2c7a04e102fe6 bind9.18-chroot-9.18.29-4.el9_6.3.s390x.rpm SHA-256: e94e2c407abedacfb2dd24921faf630c02d769153c3bf033fbefd19dac9eeff9 bind9.18-debuginfo-9.18.29-4.el9_6.3.s390x.rpm SHA-256: ae7033a786d709b6e43384b74c516418c816e29739f9728d57804974780bce7d bind9.18-debugsource-9.18.29-4.el9_6.3.s390x.rpm SHA-256: 82a2d7b11d68290db5d38c2d1759f09a5b7809d7b052919fdfa99527098d7409 bind9.18-dnssec-utils-9.18.29-4.el9_6.3.s390x.rpm SHA-256: a5221a7084b2e2886cd01c1a21c25bcdfa4dd6cae15d302115d8bca636152e34 bind9.18-dnssec-utils-debuginfo-9.18.29-4.el9_6.3.s390x.rpm SHA-256: e258d3ecb3dc395837562f45a9590b02bcfbcffc14dd74a81e32778004087f5c bind9.18-libs-9.18.29-4.el9_6.3.s390x.rpm SHA-256: d55b4ee824008ede78aa10ff000832bb28735ece517280a56d441b8c133759cc bind9.18-libs-debuginfo-9.18.29-4.el9_6.3.s390x.rpm SHA-256: 63991772b307b95e40c13eaf29e6c9197ec2ff75ba3f34fd64ae982f534208d9 bind9.18-utils-9.18.29-4.el9_6.3.s390x.rpm SHA-256: fa9f56080fdef3bc78c9d550efcf5dcd02025e5652593de4b4153a147a334a0d bind9.18-utils-debuginfo-9.18.29-4.el9_6.3.s390x.rpm SHA-256: d113fcf9589f717aa90d5cb9aaf7208e2e0cef0b9947e9353d3bdaec0b8484c3 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM bind9.18-9.18.29-4.el9_6.3.src.rpm SHA-256: aaaefda79000f147f92361f3ddc6f7a0361c297b771ad956f65aeba44974b1a2 ppc64le bind9.18-9.18.29-4.el9_6.3.ppc64le.rpm SHA-256: c5394ed420106e5a76982bfed08023c3fa00fb60e8b41d582db60ff49072dbcc bind9.18-chroot-9.18.29-4.el9_6.3.ppc64le.rpm SHA-256: 17a3ae0d3cd27ef023cafe656fd949aa155f4954971e0a3d964f4eddd15bf309 bind9.18-debuginfo-9.18.29-4.el9_6.3.ppc64le.rpm SHA-256: 5ed9765009b35be83ee7602f41440f98b8c90aa058a028884b8fca9f81bba6e5 bind9.18-debugsource-9.18.29-4.el9_6.3.ppc64le.rpm SHA-256: e2ac87c092584c196da482ec12ca453142405323f85888fb0d10ac25d105b24d bind9.18-dnssec-utils-9.18.29-4.el9_6.3.ppc64le.rpm SHA-256: 746841d7266965bf86064ab5b231cc6f462ce5fadfb629bc9a36445a90e9cac4 bind9.18-dnssec-utils-debuginfo-9.18.29-4.el9_6.3.ppc64le.rpm SHA-256: dda74d44bac26f54494b334991c790b07300199d1ec563adefe24dd4dec57c1f bind9.18-libs-9.18.29-4.el9_6.3.ppc64le.rpm SHA-256: 088f304ccf6aec5551f5cb7e0e736b12e9a68ce7d3a1c56f16f397f039aee8d5 bind9.18-libs-debuginfo-9.18.29-4.el9_6.3.ppc64le.rpm SHA-256: abd85024617e6729f2753b79ca8eb5c670b6e67618d06a6eca0005da54c6ab7b bind9.18-utils-9.18.29-4.el9_6.3.ppc64le.rpm SHA-256: 96374cf5055b8e67e28c7a3fde68f89f8c6e05ec07d4331defbe9586c8fb6e5a bind9.18-utils-debuginfo-9.18.29-4.el9_6.3.ppc64le.rpm SHA-256: d4bbbadf39f5fca7da2922f78c342b73c60b64e93339605ecfa69f2bd1d0ac3e Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM bind9.18-9.18.29-4.el9_6.3.src.rpm SHA-256: aaaefda79000f147f92361f3ddc6f7a0361c297b771ad956f65aeba44974b1a2 aarch64 bind9.18-9.18.29-4.el9_6.3.aarch64.rpm SHA-256: 0a8e87fc9b3e551e1b49f9803ac27a8f12626ba1d04821abb41f595b0ac6ca2b bind9.18-chroot-9.18.29-4.el9_6.3.aarch64.rpm SHA-256: aee4433f0c50d5294b1ec9b52bcf86529b622ca3f906bb809105303f70e8075e bind9.18-debuginfo-9.18.29-4.el9_6.3.aarch64.rpm SHA-256: a8a5586a10260f3dd4e5c9d6877fa25bbb5a321b00a106c4779da766a47f631b bind9.18-debugsource-9.18.29-4.el9_6.3.aarch64.rpm SHA-256: b9ceef6b9fe782051386a8a9f55f10df1de559c4d9201cec9364c189d75c468f bind9.18-dnssec-utils-9.18.29-4.el9_6.3.aarch64.rpm SHA-256: 0b2fabe5e12603fe0f8b6983b6c00101c6f14c7fa06312f81076b71597538e39 bind9.18-dnssec-utils-debuginfo-9.18.29-4.el9_6.3.aarch64.rpm SHA-256: 8742586f8ac3cf027c5d432441d9bc46f9c8793924905ffc8fdcb1dc6f331ee8 bind9.18-libs-9.18.29-4.el9_6.3.aarch64.rpm SHA-256: 77655c70fbb75488b7e2e9b30fcd82c6850d812f8137e61dbd69748773232790 bind9.18-libs-debuginfo-9.18.29-4.el9_6.3.aarch64.rpm SHA-256: 65468c64add671a498ea15cc12e4495ddcbad408c26a33c3788b