Alerts This Week
Warning Icon 1 697
Alerts This Week
Warning Icon 1 697

Fedora 44 BIND 9.18.47 Important Denial of Service Fix CVE-2026-1519

fedora
Calendar Grey March 31, 2026
Dist Fedora Esm H88
Update to Fedora 44 BIND 9.18.47 addresses a critical Denial of Service threat via unbounded NSEC3 iterations.
Update to 9.18.47 (rhbz#2440561) Security Fixes: Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations

Summary

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

Update Information:

Update to 9.18.47 (rhbz#2440561) Security Fixes: Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations. (CVE-2026-1519) Source: https://downloads.isc.org/isc/bind9/9.18.47/doc/arm/html/notes.html#notes-for- bind-9-18-47

Topics%20covered

Topics Covered

security advisory denial of service fedora bind important DNS

Change Log

* Wed Mar 25 2026 Petr Men\u0161k - 32:9.18.47-1 - Update to 9.18.47 (rhbz#2440561) * Tue Mar 3 2026 Petr Men\u0161k - 32:9.18.46-1 - Update to 9.18.46 (rhbz#2440561) * Wed Jan 28 2026 Petr Men\u0161k - 32:9.18.44-2 - Create /var/named directories for bind-chroot (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles * Thu Jan 22 2026 Petr Men\u0161k - 32:9.18.44-1 - Update to 9.18.44 (rhbz#2431609) * Fri Jan 16 2026 Fedora Release Engineering - 32:9.18.43-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 32:9.18.43-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Wed Dec 17 2025 Petr Men\u0161k - 32:9.18.43-1 - Update to 9.18.43 (rhbz#2415842)

References


[ 1 ] Bug #2440561 - bind-9.18.47 is available https://bugzilla.redhat.com/show_bug.cgi?id=2440561 [ 2 ] Bug #2451360 - CVE-2026-1519 bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2451360

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-19d899e92d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: bind
Product: Fedora 44
Version: 9.18.47
Release: 1.fc44
URL: https://www.isc.org/bind/
Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server

Topics%20covered

Topics Covered

security advisory denial of service fedora bind important DNS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here