Red Hat Product Errata RHSA-2026:24851 - Security Advisory Issued: 2026-06-09 Updated: 2026-06-09 RHSA-2026:24851 - Security Advisory Overview Updated Packages Synopsis Important: bind security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for bind is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2451305 - CVE-2026-1519 bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVEs CVE-2026-1519 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM bind-9.18.33-4.el10_0.3.src.rpm SHA-256: 10788bce869078270a63b23f6c339b83c7ec2dc3c70c2dd239218c188f62c668 x86_64 bind-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: 685b82af7b1376c29c295a2e83ef5ae16747482ad3a224bdf1825fe0361bfe82 bind-chroot-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: b3cac4b3303e34d9fc9f615f7cb5eb05a5e001d76e1d7a351a6add23bb05fb6e bind-debuginfo-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: c03998a6bad1470ccad96ea3cafa21745a8bf7ef88c36f8ad87c79d658d6a7e3 bind-debugsource-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: fa0a00ef8e0d7b13bee372e4e22ba3f3fdbe4759b2638bb04480ca5a125a95f2 bind-dnssec-utils-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: dbf662b27653c1b901754c6502da3efd79bc1de80a13260fc3a647d1e4d7e051 bind-dnssec-utils-debuginfo-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: 2418cadd5f90799903119f0df94c3b95d957a2c0dfa8fcd1e365ad5b024d79ec bind-libs-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: 9ffb42ce9aab72c87ddfb58a4c1d4c2baed876d8ca40ee63501b833d769420ea bind-libs-debuginfo-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: 3935e89c132e0d90ab74bfaa1eb63744a36cb1ca521f81fb7c82a3722d6d0c91 bind-license-9.18.33-4.el10_0.3.noarch.rpm SHA-256: a4ae191cf99a307ae75a90341b95372d90e2709a5b82d2c2ab64639a2ffece5c bind-utils-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: 321ef39687dbb329fc41fd3e801bbfb8a23933f44370bad7eb774cd8efd37cbd bind-utils-debuginfo-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: 1326e42be96c44104181c5a8464d26de08f7a4f6156df5ab74f6b40a97380ebe Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM bind-9.18.33-4.el10_0.3.src.rpm SHA-256: 10788bce869078270a63b23f6c339b83c7ec2dc3c70c2dd239218c188f62c668 s390x bind-9.18.33-4.el10_0.3.s390x.rpm SHA-256: 45a0cc8e6d0ebb2b4891429bff3dbebb5fa37da540ee8df540bd3a2dfbd446b7 bind-chroot-9.18.33-4.el10_0.3.s390x.rpm SHA-256: 6c39e809b4cd22b0bcc02d6e2a865adb72c05068daa81cfea8a4c2f8b04622ac bind-debuginfo-9.18.33-4.el10_0.3.s390x.rpm SHA-256: b36f14339cd026f0c8631c4233244d59cc7f1e570fbabb16b69213525d8a9791 bind-debugsource-9.18.33-4.el10_0.3.s390x.rpm SHA-256: 86bee45bda26507fa4267550b31d8907355122ea4470fb9063324c4461b81394 bind-dnssec-utils-9.18.33-4.el10_0.3.s390x.rpm SHA-256: 1a52086bae2c7ae9b1465d02ea273e5118295d44fde7a6646c750d708b11bcac bind-dnssec-utils-debuginfo-9.18.33-4.el10_0.3.s390x.rpm SHA-256: 5827f5af21795e5683f5051e1a539986c9069ec7a8c9fc8db51a6fa01aad7681 bind-libs-9.18.33-4.el10_0.3.s390x.rpm SHA-256: 9a956e1de9f3bf51f2ab7118025254735bf0ee54abb3c220bc261211c4368862 bind-libs-debuginfo-9.18.33-4.el10_0.3.s390x.rpm SHA-256: e4ed627910339e8b3cd9399fce4f202e419b9f9f24a8bf8ebcb17285f7029f48 bind-license-9.18.33-4.el10_0.3.noarch.rpm SHA-256: a4ae191cf99a307ae75a90341b95372d90e2709a5b82d2c2ab64639a2ffece5c bind-utils-9.18.33-4.el10_0.3.s390x.rpm SHA-256: cbe0772275021a64ccac8ad25e69637b0481234ca96fddc3df988829915981de bind-utils-debuginfo-9.18.33-4.el10_0.3.s390x.rpm SHA-256: 64ebcea2a062a683c1b5b34bd3f0a3ca1bea1b73b0e2f96cd49831c296e6978a Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM bind-9.18.33-4.el10_0.3.src.rpm SHA-256: 10788bce869078270a63b23f6c339b83c7ec2dc3c70c2dd239218c188f62c668 ppc64le bind-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: fa361475796dc3aea0568418594589a3e5756e4580cf4fecd6f953c4598e7e96 bind-chroot-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: 23ec38483bd2d56a6405a58a4a33ebcf9ba2e83297646c238343f08463e894ca bind-debuginfo-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: 5b8f58c10dfaac5eff5f99dbf6f10aa6c9b376e7715efa3f6a329ee398a8322b bind-debugsource-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: d5a0fc5066224875b64e286810867496147f83f086f806cbb3903609aa3d0435 bind-dnssec-utils-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: 5a519037041405dd4ecd07b3a7546434c1560dc47fda7906c64467b588802238 bind-dnssec-utils-debuginfo-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: 2f59489660afca50fb5a5d5fafb46f90fa2c76097e99e777b4d003c570a8b349 bind-libs-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: 12cd915367a6be058385af51212a599cea76ee3c7db0f49afde8062ade86f5f6 bind-libs-debuginfo-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: 7625c8834a2ee5adff451c4ceef1d211786d0379b91770ee21a3f553afbfd912 bind-license-9.18.33-4.el10_0.3.noarch.rpm SHA-256: a4ae191cf99a307ae75a90341b95372d90e2709a5b82d2c2ab64639a2ffece5c bind-utils-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: 4ed2ebfb01d9a9166cfb109dfcde41e95b084cc391b7a920816ff3ac78da5ed2 bind-utils-debuginfo-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: e07de1272e20c0c0b0e592b88e0dc199a5204688cb7ed41130ed7cceb2a46546 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM bind-9.18.33-4.el10_0.3.src.rpm SHA-256: 10788bce869078270a63b23f6c339b83c7ec2dc3c70c2dd239218c188f62c668 aarch64 bind-9.18.33-4.el10_0.3.aarch64.rpm SHA-256: d051b803ef5569f6f41665fb9c6820f3e96d51b946acec9429a7b60b8d020909 bind-chroot-9.18.33-4.el10_0.3.aarch64.rpm SHA-256: 1db5f1d0be3bab4de26e03f59ecd4f81fbb4925072cff3ce6d0a2ff5fb8e2dbd bind-debuginfo-9.18.33-4.el10_0.3.aarch64.rpm SHA-256: a1781b3946c69e165695b8b75507e65f320f9b1dfbac8ffed2e85b5186743f88 bind-debugsource-9.18.33-4.el10_0.3.aarch64.rpm SHA-256: 65b0b30853e667e412470e75a1e4d8cb90ffc3d925e8bc9556f043298e2a4d65 bind-dnssec-utils-9.18.33-4.el10_0.3.aarch64.rpm SHA-256: 5ac2d9934dbddb7e856b978c7010abc899073b4a6e5660a857de60f11d08f833 bind-dnssec-utils-debuginfo-9.18.33-4.el10_0.3.aarch64.rpm SHA-256: d5a3cff5bd2ffda8eb24966aada1eebb9b91c18f7982707a201e388653b1e7a3 bind-libs-9.18.33-4.el10_0.3.aarch64.rpm SHA-256: 4a9e426a1b12ba7ef23fb25f9702ae73212507a6c61ad7a520a89fd3e5ddadfa bind-libs-debuginfo-9.18.33-4.el10_0.3.aarch64.rpm SHA-256: e8f620cb3b3a577aaea7ff33897532d469b493558b4d8b3f9838a5efac663878 bind-license-9.18.33-4.el10_0.3.noarch.rpm SHA-256: a4ae191cf99a307ae75a90341b95372d90e2709a5b82d2c2ab64639a2ffece5c bind-utils-9.18.33-4.el10_0.3.aarch64.rpm SHA-256: b834928fe031dd242a07849eee57987c9cfa02c0f49f31b068b75eef5e210956 bind-utils-debuginfo-9.18.33-4.el10_0.3.aarch64.rpm SHA-256: a1503fcf3bf11f56be0ab454f5bee97062dfddb81cf07436c224c8ea9663f0fb Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 SRPM x86_64 bind-debuginfo-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: c03998a6bad1470ccad96ea3cafa21745a8bf7ef88c36f8ad87c79d658d6a7e3 bind-debugsource-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: fa0a00ef8e0d7b13bee372e4e22ba3f3fdbe4759b2638bb04480ca5a125a95f2 bind-devel-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: 2bc8ac5d6412f8b32f94207b22d9f9664cb3e8b7a1a098621884480134724928 bind-dnssec-utils-debuginfo-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: 2418cadd5f90799903119f0df94c3b95d957a2c0dfa8fcd1e365ad5b024d79ec bind-doc-9.18.33-4.el10_0.3.noarch.rpm SHA-256: a027053dd01c13acb0f0707febdf8e05b4ea4f96cfa68a4724d3b22b5cf2eb91 bind-libs-debuginfo-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: 3935e89c132e0d90ab74bfaa1eb63744a36cb1ca521f81fb7c82a3722d6d0c91 bind-utils-debuginfo-9.18.33-4.el10_0.3.x86_64.rpm SHA-256: 1326e42be96c44104181c5a8464d26de08f7a4f6156df5ab74f6b40a97380ebe Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 SRPM ppc64le bind-debuginfo-9.18.33-4.el10_0.3.ppc64le.rpm SHA-256: 5b8f58c10dfaac5eff5f99dbf6f10aa6c9b376e7715efa3f6a329ee398a8322b bind-debugsource-9.18.33-4.el10_0.3.pp