[El-errata] ELSA-2026-55442 Important: Oracle Linux 9 bind9.18 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-55442

http://linux.oracle.com/errata/ELSA-2026-55442.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bind9.18-9.18.29-14.el9_8.8.x86_64.rpm
bind9.18-chroot-9.18.29-14.el9_8.8.x86_64.rpm
bind9.18-devel-9.18.29-14.el9_8.8.i686.rpm
bind9.18-devel-9.18.29-14.el9_8.8.x86_64.rpm
bind9.18-dnssec-utils-9.18.29-14.el9_8.8.x86_64.rpm
bind9.18-doc-9.18.29-14.el9_8.8.noarch.rpm
bind9.18-libs-9.18.29-14.el9_8.8.i686.rpm
bind9.18-libs-9.18.29-14.el9_8.8.x86_64.rpm
bind9.18-utils-9.18.29-14.el9_8.8.x86_64.rpm

aarch64:
bind9.18-9.18.29-14.el9_8.8.aarch64.rpm
bind9.18-chroot-9.18.29-14.el9_8.8.aarch64.rpm
bind9.18-devel-9.18.29-14.el9_8.8.aarch64.rpm
bind9.18-dnssec-utils-9.18.29-14.el9_8.8.aarch64.rpm
bind9.18-doc-9.18.29-14.el9_8.8.noarch.rpm
bind9.18-libs-9.18.29-14.el9_8.8.aarch64.rpm
bind9.18-utils-9.18.29-14.el9_8.8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/bind9.18-9.18.29-14.el9_8.8.src.rpm

Related CVEs:

CVE-2026-10723
CVE-2026-11331
CVE-2026-11622
CVE-2026-11721
CVE-2026-13204
CVE-2026-13321




Description of changes:

[32:9.18.29-14.8]
- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)

[32:9.18.29-14.7]
- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
  RHEL-213314)

[32:9.18.29-14.6]
- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
  RHEL-213389)

[32:9.18.29-14.5]
- Reject invalid signed wildcard records (CVE-2026-11721,
  RHEL-213417)

[32:9.18.29-14.4]
- Fix RPZ wildcard expansion self-referential CNAME
  (CVE-2026-11331, RHEL-213495)

[32:9.18.29-14.3]
- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
  RHEL-213495)