bind-9.11.36-16.el8_10.14

エラータID: AXSA:2026-1553:08

リリース日: 
2026/08/17 Monday - 19:35
題名: 
bind-9.11.36-16.el8_10.14
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- BIND には、データの妥当性の確認が不足している問題があるため、
リモートの攻撃者により、データ破壊を可能とする脆弱性が存在します。
(CVE-2026-10723)

- BIND の DNSSEC 検証リゾルバには、リモートの攻撃者により、
サービス拒否攻撃 (リソース枯渇) を可能とする脆弱性が存在します。
(CVE-2026-11622)

- BIND には、データの妥当性の確認が不足している問題があるため、
リモートの攻撃者により、キャッシュポイズニング攻撃を可能とする
脆弱性が存在します。(CVE-2026-11721)

- BIND には、意図せずアサーションに失敗してしまう問題があるため、
リモートの攻撃者により、サービス拒否攻撃を可能とする脆弱性が存在
します。(CVE-2026-13204)

- BIND には、データの妥当性の確認が不足している問題があるため、
リモートの攻撃者により、データ破壊を可能とする脆弱性が存在します。
(CVE-2026-13321)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2026-10723
BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
CVE-2026-11622
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
CVE-2026-11721
It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set `synth-from-dnssec yes;` (which is the default). This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
CVE-2026-13204
If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
CVE-2026-13321
The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. bind-9.11.36-16.el8_10.14.src.rpm
    MD5: 4314380dd98012fcbfe2d093a5fe5551
    SHA-256: 06fbb2a541f718ecb2d535346cbb622bb4ff4b11b22f60d1590c4d1d0e347914
    Size: 8.24 MB

Asianux Server 8 for x86_64
  1. bind-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 81513f3c0e865925a750590d232ac99d
    SHA-256: 9f2bd5b29eb3118c08ea4494cab8b25f260aa4dce70c6a1e4105c5e101dcdd96
    Size: 2.14 MB
  2. bind-chroot-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 79eda3eefa893881ae93fd87faa09f25
    SHA-256: d654a1ea6bc781757947763217900bc5ef3f7b4f42eaf71f5188d10045f47802
    Size: 107.80 kB
  3. bind-devel-9.11.36-16.el8_10.14.i686.rpm
    MD5: 490906f4623c16f49bc84ae5efb7081a
    SHA-256: 018154dafa6d145719c4b10f801fbdd7b58696ab171e1c251514cb05a393665e
    Size: 180.34 kB
  4. bind-devel-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 184009dd9bbbe80645a5a900b219a166
    SHA-256: b464e1ef0894a46698ddd1a0238197fe19be3fc2ba183766356a3868ee1ccb84
    Size: 180.34 kB
  5. bind-export-devel-9.11.36-16.el8_10.14.i686.rpm
    MD5: 2112fb14da5fa85102fba087dd46262e
    SHA-256: e70062543e83afa0d7b350b07bda7a94079a79299c5c3ae2ba9efbadedd14848
    Size: 410.24 kB
  6. bind-export-devel-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: c697d106a94390e6a900a137a53fa65f
    SHA-256: 91e9e8a4d9f88f32aec30af61beae3ae40df637a977b11efcf19e0005158dcb2
    Size: 410.23 kB
  7. bind-export-libs-9.11.36-16.el8_10.14.i686.rpm
    MD5: ace6f07a4f575b895eb9366e34ba56fc
    SHA-256: 2470d7f4318fd183d0a5d68763590442cf31d9b63104018edb35ca87fee4f1c6
    Size: 1.22 MB
  8. bind-export-libs-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: b01245ba83675468f15f614d74b35a80
    SHA-256: 990399befaf7435e0cd1d54251d5d5eb152f3521ecd6a6ed63c15c0eea7d6ea1
    Size: 1.15 MB
  9. bind-libs-9.11.36-16.el8_10.14.i686.rpm
    MD5: 1984c65978e23aa2f7a151da02f3fbce
    SHA-256: b3681673d96978f6710033d759f974cd9ff5f79674581d451e614163ad6f7bf3
    Size: 182.90 kB
  10. bind-libs-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 16d71bf67adc76115eeae17a0f66203b
    SHA-256: 811f7ec8297bdfbde6a3265016048a299d2a1fb9c8d4fb9b837b444f174709b0
    Size: 177.32 kB
  11. bind-libs-lite-9.11.36-16.el8_10.14.i686.rpm
    MD5: 6dafba97c83841b1cfae5172267ba518
    SHA-256: 664946b4842446a55412a677f693a342ccaad6050dff8761895318a2611a59c9
    Size: 1.27 MB
  12. bind-libs-lite-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 588e94539b21bab1f8bc5133e7ec17a1
    SHA-256: b1a394f7799d2a160ad74e50f8175370c17a900c6cb2e1190031438c72535b5e
    Size: 1.19 MB
  13. bind-license-9.11.36-16.el8_10.14.noarch.rpm
    MD5: 0f5ca2729dcd67cc277ae4a7bc878375
    SHA-256: 8a52d3091c2a8c4f2ada931c65f3f06a4183bab64293d660e827a0e62a1513d6
    Size: 105.67 kB
  14. bind-lite-devel-9.11.36-16.el8_10.14.i686.rpm
    MD5: 9daf7b148e817a9c2fdbf677b0b774eb
    SHA-256: bd355b9f65eb51f1ff8e9d18ec7e7d324a35c2950361d15efbcd7e3b3d07fbd6
    Size: 403.46 kB
  15. bind-lite-devel-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 0edb4e89004f8c8a24065a640a43e2a5
    SHA-256: da383af8b68765938f4da6e0cce7341cbedcf046fc8d02ee434ea2f2b9db5d87
    Size: 403.45 kB
  16. bind-pkcs11-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 2e0ebc43f01943253faeae26a39d7834
    SHA-256: edf954b3ea6a8d07dff27a43467d5556821158e7e6df181708f630d6857f31db
    Size: 401.16 kB
  17. bind-pkcs11-devel-9.11.36-16.el8_10.14.i686.rpm
    MD5: c35573df75a4ce7bc0e38f51925bf01d
    SHA-256: 5876130383c3c1c23ff3ea2ae26bb4238b2973bbb81728083ea033c009577c0f
    Size: 117.90 kB
  18. bind-pkcs11-devel-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 8514f0b208fbad199d16c71f00bf1103
    SHA-256: 41151e083863a0ec325c6b79514af97dd55c196ebb09015ab2f95c0814175a1d
    Size: 117.89 kB
  19. bind-pkcs11-libs-9.11.36-16.el8_10.14.i686.rpm
    MD5: 607772da1d0871de15e72e2b957e1686
    SHA-256: abfdd420bcab1d2ca3d7c6a38f89afe0356afe03f5ac5a0efb60d8b3068ba086
    Size: 1.22 MB
  20. bind-pkcs11-libs-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: b3321d15792fe710f91552693dcfd7b4
    SHA-256: 8df7ae975f02bf3e9468a2734f4eccf292509becd3dfc4e272924badf654192d
    Size: 1.14 MB
  21. bind-pkcs11-utils-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: b12227c8ad60118e5ba80b79baf091f5
    SHA-256: 55913b934cd84e5cec0c61619c5340af19e1b8fc24df46fa229a8df3ff8afd44
    Size: 262.94 kB
  22. bind-sdb-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 32f8cb16a2271b01cad17908b74a0bf8
    SHA-256: 0d78658d8425887a72957043614608378d113a915754ff0953d39cb0853445c6
    Size: 461.10 kB
  23. bind-sdb-chroot-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 94fa1575bc1e30b37f65e57de9b60485
    SHA-256: c997eae41142bd3642513d4224df4466ee420f926493f16d13e491292dc09748
    Size: 107.43 kB
  24. bind-utils-9.11.36-16.el8_10.14.x86_64.rpm
    MD5: 3a305b55799259bd155c7a5cb2054559
    SHA-256: 397829cbe7f09d7d07b0023183ed014a4e759ec9152ea9d6e0134375a9bade62
    Size: 454.63 kB
  25. python3-bind-9.11.36-16.el8_10.14.noarch.rpm
    MD5: bb53c87608269e202b7050e3775d6554
    SHA-256: c7fe7cff6c8beb6dcb5a303a1c00bb8149b6973f941417a090ce8fbd992ecf9a
    Size: 152.94 kB