Alert GCSA-26225 - Vulnerabilita' in ISC BIND

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

Alert ID: GCSA-26225
Data: 18 Settembre 2026
Titolo: Vulnerabilita' in ISC BIND

******************************************************************

:: Descrizione del problema

L'Internet Systems Consortium (ISC) ha rilasciato nuove versioni
del server DNS BIND.
Oltre alle correzioni dei bug e a miglioramenti delle funzionalita',
queste versioni risolvono anche alcune vulnerabilita' di sicurezza.

Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

BIND 9.11.0 -> 9.18.50
BIND 9.18.0 -> 9.18.50
BIND 9.20.0 -> 9.20.27
BIND 9.21.0 -> 9.21.25

BIND Supported Preview Edition 9.11.3-S1 -> 9.18.50-S1
BIND Supported Preview Edition 9.20.9-S1 -> 9.20.27-S1


:: Impatto

Denial of Service
Data Manipulation
Security Restriction Bypass


:: Soluzioni

Aggiornare BIND alle ultime versioni

BIND 9.20.29
https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/notes.html

BIND 9.21.26
https://downloads.isc.org/isc/bind9/9.21.26/doc/arm/html/notes.html

BIND Supported Preview Edition 9.20.29-S1

https://downloads.isc.org


:: Riferimenti

ISC BIND Security Advisory
https://kb.isc.org/docs/cve-2026-19033
https://kb.isc.org/docs/cve-2026-19662
https://kb.isc.org/docs/cve-2026-19666
https://kb.isc.org/docs/cve-2026-19667
https://kb.isc.org/docs/cve-2026-19668
https://kb.isc.org/docs/cve-2026-19941
https://kb.isc.org/docs/cve-2026-75029
https://kb.isc.org/docs/cve-2026-76163
https://kb.isc.org/docs/cve-2026-77119
https://kb.isc.org/docs/cve-2026-77692
https://kb.isc.org/docs/cve-2026-78301
https://kb.isc.org/docs/cve-2026-80274
https://kb.isc.org/docs/cve-2026-81563
https://kb.isc.org/docs/cve-2026-81736

BIND 9 Security Vulnerability Matrix
https://kb.isc.org/docs/aa-00913

New BIND releases are available
https://lists.isc.org/pipermail/bind-announce/2026-September/001302.html
https://lists.isc.org/pipermail/bind-announce/2026-September/001303.html

Mitre CVE
I riferimenti CVE sono disponibili nell'advisory originale.



GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaqz6xwAKCRDBnEyTZRJg
QoD6AKC2LQjS06Z7TzYy7OhkLBwt5fynxACeJa9d13cPsAB567rFEJJQjPE9Pf4=
=713K
-----END PGP SIGNATURE-----