The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Security Fix(es):
bind: Amplification vulnerabilities via self-pointed glue records (CVE-2026-3592)
bind: Unbounded resend loop in BIND 9 resolver (CVE-2026-5950)
Bug Fix(es) and Enhancement(s):
Bind 9.16.23 DNSSEC Key Rollover with KASP Causes ZSK Key To Be Removed Prematurely (JIRA:Rocky Linux-12487)
nslookup does not return and hang at epoll_wait() on some special occasions. (JIRA:Rocky Linux-29712)
Update to latest minor version 9.16.50 [rhel-9.9] (JIRA:Rocky Linux-6454)
pkcs11-tools test failing on engine (JIRA:Rocky Linux-213788)
dig on s390x does not return output when fails (JIRA:Rocky Linux-212648)
bind: New root trust anchor key for DNSSEC [rhel-9.9] (JIRA:Rocky Linux-255745)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.
{
"license": "CC-BY-4.0",
"license_url": "https://creativecommons.org/licenses/by/4.0/",
"source_advisory": "RHSA-2026:97586"
}