MGASA-2026-0258
Updated bind packages fix a security vulnerability
The updated bind packages fix a security vulnerability: When BIND 9 was configured to use DNS64 and encounters a DNAME redirect, it could end up using freed memory for the DNS response owner name. This caused the response to contain corrupted data.
What each source reports
OSV No score
Updated bind packages fix a security vulnerability
The updated bind packages fix a security vulnerability: When BIND 9 was configured to use DNS64 and encounters a DNAME redirect, it could end up using freed memory for the DNS response owner name. This caused the response to contain corrupted data.
- Record
MGASA-2026-0258- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2026-0258 is a vulnerability with no CVSS score yet in bind, published July 18, 2026. No source lists public exploit code. Fixed in bind 9.20.24-1.mga10.