ALAS2-2026-3226

Amazon Linux 2 Security Advisory: ALAS2-2026-3226
Advisory Released Date: 2026-04-01
Advisory Updated Date: 2026-04-01
Severity: Important
Issue Overview:

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries).
This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1. (CVE-2026-1519)


Affected Packages:

bind


Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.


Issue Correction:
Run yum update bind or yum update --advisory ALAS2-2026-3226 to update your system.

New Packages:
aarch64:
    bind-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-pkcs11-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-sdb-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-libs-lite-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-libs-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-utils-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-devel-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-lite-devel-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-chroot-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-sdb-chroot-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-export-libs-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-export-devel-9.11.4-26.P2.amzn2.13.14.aarch64
    bind-debuginfo-9.11.4-26.P2.amzn2.13.14.aarch64

i686:
    bind-9.11.4-26.P2.amzn2.13.14.i686
    bind-pkcs11-9.11.4-26.P2.amzn2.13.14.i686
    bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.14.i686
    bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.14.i686
    bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.14.i686
    bind-sdb-9.11.4-26.P2.amzn2.13.14.i686
    bind-libs-lite-9.11.4-26.P2.amzn2.13.14.i686
    bind-libs-9.11.4-26.P2.amzn2.13.14.i686
    bind-utils-9.11.4-26.P2.amzn2.13.14.i686
    bind-devel-9.11.4-26.P2.amzn2.13.14.i686
    bind-lite-devel-9.11.4-26.P2.amzn2.13.14.i686
    bind-chroot-9.11.4-26.P2.amzn2.13.14.i686
    bind-sdb-chroot-9.11.4-26.P2.amzn2.13.14.i686
    bind-export-libs-9.11.4-26.P2.amzn2.13.14.i686
    bind-export-devel-9.11.4-26.P2.amzn2.13.14.i686
    bind-debuginfo-9.11.4-26.P2.amzn2.13.14.i686

noarch:
    bind-license-9.11.4-26.P2.amzn2.13.14.noarch

src:
    bind-9.11.4-26.P2.amzn2.13.14.src

x86_64:
    bind-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-pkcs11-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-sdb-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-libs-lite-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-libs-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-utils-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-devel-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-lite-devel-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-chroot-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-sdb-chroot-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-export-libs-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-export-devel-9.11.4-26.P2.amzn2.13.14.x86_64
    bind-debuginfo-9.11.4-26.P2.amzn2.13.14.x86_64

Additional References

Release Notes:  Amazon Linux 2 Release Notes

Red Hat: CVE-2026-1519

Mitre: CVE-2026-1519