gpp_maybe Security update for bind

SUSE-SLE-Module-Basesystem-15-SP7-2026-3554

This update for bind fixes the following issues: - CVE-2026-10723: incorrect acceptance of NSEC3 records (bsc#1271982). - CVE-2026-11331: potential wildcard CNAME RPZ policy bypass (bsc#1271984). - CVE-2026-11622: potential memory usage beyond configured limits (bsc#1271986). - CVE-2026-11721: cache poisoning possible with label count discrepancy, RRSIG, and wildcards (bsc#1271987). - CVE-2026-13204: unexpected exit in certain situations with NSEC and NSEC3 both present (bsc#1271989). - CVE-2026-13321: DNSSEC validation bypass via out-of-zone NSEC Next field (bsc#1271990).

• Release Date
  Aug 10 2026
• References
  Bugzilla: 1271982, 1271984, 1271986, 1271987, 1271989, 1271990
  CVEs: CVE-2026-10723, CVE-2026-11331, CVE-2026-11622, CVE-2026-11721, CVE-2026-13204, CVE-2026-13321
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 x86_64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.6-150300.22.62.1 lock src

  libdns1605
  DNS library used by BIND

  9.16.6-150300.22.62.1 lock rpm

  libirs-devel
  Development files for IRS

  9.16.6-150300.22.62.1 lock rpm

  libirs1601
  The BIND Information Retrieval System library

  9.16.6-150300.22.62.1 lock rpm

  libisc1606
  ISC shared library used by BIND

  9.16.6-150300.22.62.1 lock rpm

  libisccfg1600
  Exported ISC configuration shared library

  9.16.6-150300.22.62.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.6-150300.22.62.1 lock src

  libdns1605
  DNS library used by BIND

  9.16.6-150300.22.62.1 lock rpm

  libirs-devel
  Development files for IRS

  9.16.6-150300.22.62.1 lock rpm

  libirs1601
  The BIND Information Retrieval System library

  9.16.6-150300.22.62.1 lock rpm

  libisc1606
  ISC shared library used by BIND

  9.16.6-150300.22.62.1 lock rpm

  libisccfg1600
  Exported ISC configuration shared library

  9.16.6-150300.22.62.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.6-150300.22.62.1 lock src

  libdns1605
  DNS library used by BIND

  9.16.6-150300.22.62.1 lock rpm

  libirs-devel
  Development files for IRS

  9.16.6-150300.22.62.1 lock rpm

  libirs1601
  The BIND Information Retrieval System library

  9.16.6-150300.22.62.1 lock rpm

  libisc1606
  ISC shared library used by BIND

  9.16.6-150300.22.62.1 lock rpm

  libisccfg1600
  Exported ISC configuration shared library

  9.16.6-150300.22.62.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  bind
  Domain Name System (DNS) Server (named)

  9.16.6-150300.22.62.1 lock src

  libdns1605
  DNS library used by BIND

  9.16.6-150300.22.62.1 lock rpm

  libirs-devel
  Development files for IRS

  9.16.6-150300.22.62.1 lock rpm

  libirs1601
  The BIND Information Retrieval System library

  9.16.6-150300.22.62.1 lock rpm

  libisc1606
  ISC shared library used by BIND

  9.16.6-150300.22.62.1 lock rpm

  libisccfg1600
  Exported ISC configuration shared library

  9.16.6-150300.22.62.1 lock rpm