Red Hat Enterprise Linux 9 BIND Update Fixes Four CVEs
Tech GuruQuick Answer
Red Hat RHSA-2026:93072 fixes four BIND 9.18 vulnerabilities on RHEL 9. Inventory authoritative and recursive DNS roles, confirm affected packages, install the signed update, restart as directed, validate resolution, zones, DNSSEC and monitoring, and retain package and change evidence.
Confirm Scope And Apply The Supported Remediation
What to do now: Inventory RHEL 9 systems using bind9.18, exact packages, authoritative or recursive roles, network exposure, zones, DNSSEC, owners, backups, and maintenance windows. Confirm the RHEL 9 product and advisory-listed package; do not apply the package range to upstream BIND or other distribution builds. Install the signed RHSA-2026:93072 packages from supported Red Hat repositories and follow the authority's service-restart guidance. Confirm installed NEVRA, test authoritative and recursive resolution, transfers, DNSSEC and monitoring, review service logs, and retain package and change evidence.
Last verified: 2026-10-31 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.
Scope And Authority
| Product scope | BIND 9.18 on Red Hat Enterprise Linux 9 AppStream and CodeReady Linux Builder |
|---|---|
| Advisory | RHSA-2026:93072 |
| CVEs | CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313 |
| Authoritative release date | 2026-10-30 17:44:24 UTC |
| Authority revision date | 2026-10-30 23:04:41 UTC |
| Affected versions | The advisory-listed bind9.18 package on RHEL 9 before the fixed source build, subject to the exact product and architecture scope in RHSA-2026:93072. |
| Fixed version | bind9.18-32:9.18.29-14.el9_8.12.src |
| CVSS base score | 7.5-8.1 (CVSS v3.1; CVE-specific) |
| CVSS severity | High |
| Exploitation status | Red Hat does not state that these vulnerabilities are being maliciously exploited.; no exploitation claim is inferred. |
What Changed
Red Hat rates the BIND 9.18 update Important and fixes four CVEs with CVSS v3.1 scores of 7.5 and 8.1.
What To Validate Now
- Inventory. Inventory RHEL 9 systems using bind9.18, exact packages, authoritative or recursive roles, network exposure, zones, DNSSEC, owners, backups, and maintenance windows.
- Establish applicability. Confirm the RHEL 9 product and advisory-listed package; do not apply the package range to upstream BIND or other distribution builds.
- Remediate. Install the signed RHSA-2026:93072 packages from supported Red Hat repositories and follow the authority's service-restart guidance.
- Validate. Confirm installed NEVRA, test authoritative and recursive resolution, transfers, DNSSEC and monitoring, review service logs, and retain package and change evidence.
- Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.
Operational Cautions
DNS restarts and resolver changes can affect critical name service. Coordinate redundant nodes, preserve zone data, and validate failover before and after the update.
Evidence To Retain
- Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
- UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
- Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.
Related TechGeeks Resources
Authoritative References
Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.
