Fedora alert FEDORA-2026-dbb0776ac5 (bind9-next)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 44 Update: bind9-next-9.21.22-2.fc44 | |
| Date: | Mon, 15 Jun 2026 00:51:13 +0000 | |
| Message-ID: | <20260615005113.7B9766D70A@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-dbb0776ac5 2026-06-15 00:48:35.285092+00:00 -------------------------------------------------------------------------------- Name : bind9-next Product : Fedora 44 Version : 9.21.22 Release : 2.fc44 URL : https://www.isc.org/downloads/bind/ Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server Description : BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. -------------------------------------------------------------------------------- Update Information: Update to 9.21.22 (rhbz#2480122) Security Fixes: Limit resolver server list size. (CVE-2026-3592) Fix GSS-API resource leak. (CVE-2026-3039) Disable recursion, UPDATE, and NOTIFY for non-IN views. (CVE-2026-5946) Avoid unbounded recursion loop. (CVE-2026-5950) Fix crash in resolver when SIG(0)-signed responses are received under load. (CVE-2026-5947) Fix use-after-free error in DNS-over-HTTPS when processing HTTP/2 SETTINGS frames. (CVE-2026-3593) Fix outgoing zone transfers' quota issue. Feature Changes: Fix CPU spikes and slow queries when cache approaches memory limit. Implement RFC 3645 Section 4.1.1 key expiry check in TKEY. Reduce memory footprint by actively returning unused memory to the OS. multiple bugfixes. Source: https://downloads.isc.org/isc/bind9/9.21.22/doc/arm/html/... bind-9-21-22 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 3 2026 Petr Menšík <pemensik@redhat.com> - 32:9.21.22-2 - Switch downstream change to upstream for 32b mem check * Wed Jun 3 2026 Petr Menšík <pemensik@redhat.com> - 32:9.21.22-1 - Update to 9.21.22 (rhbz#2480122) * Tue May 5 2026 Petr Menšík <pemensik@redhat.com> - 32:9.21.21-7 - Fix build with openssl4 (rhbz#2463851) * Tue May 5 2026 Petr Menšík <pemensik@redhat.com> - 32:9.21.21-6 - Remove unused forgotten files * Thu Apr 30 2026 Petr Menšík <pemensik@redhat.com> - 32:9.21.21-5 - Stop publishing rwtab.d/named -------------------------------------------------------------------------------- References: [ 1 ] Bug #2480122 - bind9-next-9.21.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=2480122 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-dbb0776ac5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
Attachment: None (type=text/plain)
-- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new