Security Updates for Fedora 43 Address Multiple CVEs

On May 26, 2026, Fedora released updates for bind-dyndb-ldap and bind, addressing critical security vulnerabilities. The updates include fixes for CVE-2026-3592, which limits resolver server list size, CVE-2026-3039, which resolves a GSS-API resource leak, and CVE-2026-5946, which disables recursion, UPDATE, and NOTIFY for non-IN views. All three CVEs were published on May 20, 2026. Affected systems include Fedora 43 installations using bind and bind-dyndb-ldap. Users are advised to update to version 9.18.49 to mitigate these vulnerabilities. The updates are crucial for maintaining the security and integrity of systems relying on these services.

Key Points: • Fedora 43 updates address three critical CVEs affecting bind and bind-dyndb-ldap. • CVE-2026-3592 limits resolver server list size to enhance security. • Users are urged to update to version 9.18.49 to mitigate these vulnerabilities.