Back Linuxsecurity

Fedora 43 bind-dyndb-ldap 2026

Linuxsecurity •LinuxSecurity Advisories • May 26, 2026

Update to 9.18.49 (rhbz#2480121) Security Fixes: Limit resolver server list size. (CVE-2026-3592) Fix GSS-API resource leak. (CVE-2026-3039) Disable recursion, UPDATE, and NOTIFY for non-IN views. (CVE-2026-5946)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Security Updates for Fedora 43 Address Multiple CVEs On May 26, 2026, Fedora released updates for bind-dyndb-ldap and bind, addressing critical security vulnerabilities. The updates include fixes for CVE-2026-3592, which limits resolver server list size, CVE-2026-3039, which resolves a GSS-API resource leak, and CVE-2026-5946, which disables recursion, UPDATE, and NOTIFY for non-IN views. All three CVEs were published on May 20, 2026. Affected systems include Fedora 43 installations using bind and bind-dyndb-ldap. Users are advised to update to version 9.18.49 to mitigate these vulnerabilities. The updates are crucial for maintaining the security and integrity of systems relying on these services. 2 sources 58

Extracted Entities

CVEs (3)

CVE-2026-3039 CVE-2026-3592 CVE-2026-5946