Alert GCSA-26225 - Vulnerabilita' in ISC BIND

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-26225 Data: 18 Settembre 2026 Titolo: Vulnerabilita' in ISC BIND ****************************************************************** :: Descrizione del problema L'Internet Systems Consortium (ISC) ha rilasciato nuove versioni del server DNS BIND. Oltre alle correzioni dei bug e a miglioramenti delle funzionalita', queste versioni risolvono anche alcune vulnerabilita' di sicurezza. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato BIND 9.11.0 -> 9.18.50 BIND 9.18.0 -> 9.18.50 BIND 9.20.0 -> 9.20.27 BIND 9.21.0 -> 9.21.25 BIND Supported Preview Edition 9.11.3-S1 -> 9.18.50-S1 BIND Supported Preview Edition 9.20.9-S1 -> 9.20.27-S1 :: Impatto Denial of Service Data Manipulation Security Restriction Bypass :: Soluzioni Aggiornare BIND alle ultime versioni BIND 9.20.29 https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/notes.html BIND 9.21.26 https://downloads.isc.org/isc/bind9/9.21.26/doc/arm/html/notes.html BIND Supported Preview Edition 9.20.29-S1 https://downloads.isc.org :: Riferimenti ISC BIND Security Advisory https://kb.isc.org/docs/cve-2026-19033 https://kb.isc.org/docs/cve-2026-19662 https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667 https://kb.isc.org/docs/cve-2026-19668 https://kb.isc.org/docs/cve-2026-19941 https://kb.isc.org/docs/cve-2026-75029 https://kb.isc.org/docs/cve-2026-76163 https://kb.isc.org/docs/cve-2026-77119 https://kb.isc.org/docs/cve-2026-77692 https://kb.isc.org/docs/cve-2026-78301 https://kb.isc.org/docs/cve-2026-80274 https://kb.isc.org/docs/cve-2026-81563 https://kb.isc.org/docs/cve-2026-81736 BIND 9 Security Vulnerability Matrix https://kb.isc.org/docs/aa-00913 New BIND releases are available https://lists.isc.org/pipermail/bind-announce/2026-September/001302.html https://lists.isc.org/pipermail/bind-announce/2026-September/001303.html Mitre CVE I riferimenti CVE sono disponibili nell'advisory originale. GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaqz6xwAKCRDBnEyTZRJg QoD6AKC2LQjS06Z7TzYy7OhkLBwt5fynxACeJa9d13cPsAB567rFEJJQjPE9Pf4= =713K -----END PGP SIGNATURE-----