Alerts This Week
Warning Icon 1 409
Alerts This Week
Warning Icon 1 409

Fedora 44 bind9-next Important DNS Server Security Fixes 2026-dbb0776ac5

fedora
Calendar Grey June 14, 2026
Dist Fedora Esm H88
Fedora 44's bind9-next update addresses several important security fixes, enhancing DNS server stability and performance.
Update to 9.21.22 (rhbz#2480122) Security Fixes: Limit resolver server list size

Summary

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

Update Information:

Update to 9.21.22 (rhbz#2480122) Security Fixes: Limit resolver server list size. (CVE-2026-3592) Fix GSS-API resource leak. (CVE-2026-3039) Disable recursion, UPDATE, and NOTIFY for non-IN views. (CVE-2026-5946) Avoid unbounded recursion loop. (CVE-2026-5950) Fix crash in resolver when SIG(0)-signed responses are received under load. (CVE-2026-5947) Fix use-after-free error in DNS-over-HTTPS when processing HTTP/2 SETTINGS frames. (CVE-2026-3593) Fix outgoing zone transfers' quota issue. Feature Changes: Fix CPU spikes and slow queries when cache approaches memory limit. Implement RFC 3645 Section 4.1.1 key expiry check in TKEY. Reduce memory footprint by actively returning unused memory to the OS. multiple bugfixes. Source: https://downloads.isc.org/isc/bind9/9.21.22/doc/arm/html/notes.html#notes-for- bind-9-21-22

Topics%20covered

Topics Covered

security advisory fedora security fix important resource leak bind9-next

Change Log

* Wed Jun 3 2026 Petr Menšík - 32:9.21.22-2 - Switch downstream change to upstream for 32b mem check * Wed Jun 3 2026 Petr Menšík - 32:9.21.22-1 - Update to 9.21.22 (rhbz#2480122) * Tue May 5 2026 Petr Menšík - 32:9.21.21-7 - Fix build with openssl4 (rhbz#2463851) * Tue May 5 2026 Petr Menšík - 32:9.21.21-6 - Remove unused forgotten files * Thu Apr 30 2026 Petr Menšík - 32:9.21.21-5 - Stop publishing rwtab.d/named

References


[ 1 ] Bug #2480122 - bind9-next-9.21.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=2480122

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-dbb0776ac5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: bind9-next
Product: Fedora 44
Version: 9.21.22
Release: 2.fc44
URL: https://www.isc.org/downloads/bind/
Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server

Topics%20covered

Topics Covered

security advisory fedora security fix important resource leak bind9-next

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here