Amazon Linux 2023 Security Advisory: ALAS2023-2026-1533
Advisory Released Date: 2026-04-01
Advisory Updated Date: 2026-04-01
Severity:
Important
Issue Overview:
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries).
This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1. (CVE-2026-1519)
Affected Packages:
bind
Issue Correction:
Run dnf update bind --releasever 2023.10.20260330 or dnf update --advisory ALAS2023-2026-1533 --releasever 2023.10.20260330 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
bind-libs-debuginfo-9.18.33-1.amzn2023.0.5.aarch64
bind-debuginfo-9.18.33-1.amzn2023.0.5.aarch64
bind-devel-9.18.33-1.amzn2023.0.5.aarch64
bind-dnssec-utils-9.18.33-1.amzn2023.0.5.aarch64
bind-libs-9.18.33-1.amzn2023.0.5.aarch64
bind-chroot-9.18.33-1.amzn2023.0.5.aarch64
bind-utils-9.18.33-1.amzn2023.0.5.aarch64
bind-dnssec-utils-debuginfo-9.18.33-1.amzn2023.0.5.aarch64
bind-utils-debuginfo-9.18.33-1.amzn2023.0.5.aarch64
bind-9.18.33-1.amzn2023.0.5.aarch64
bind-debugsource-9.18.33-1.amzn2023.0.5.aarch64
noarch:
bind-license-9.18.33-1.amzn2023.0.5.noarch
bind-doc-9.18.33-1.amzn2023.0.5.noarch
src:
bind-9.18.33-1.amzn2023.0.5.src
x86_64:
bind-libs-debuginfo-9.18.33-1.amzn2023.0.5.x86_64
bind-utils-debuginfo-9.18.33-1.amzn2023.0.5.x86_64
bind-utils-9.18.33-1.amzn2023.0.5.x86_64
bind-debuginfo-9.18.33-1.amzn2023.0.5.x86_64
bind-libs-9.18.33-1.amzn2023.0.5.x86_64
bind-dnssec-utils-debuginfo-9.18.33-1.amzn2023.0.5.x86_64
bind-chroot-9.18.33-1.amzn2023.0.5.x86_64
bind-debugsource-9.18.33-1.amzn2023.0.5.x86_64
bind-dnssec-utils-9.18.33-1.amzn2023.0.5.x86_64
bind-devel-9.18.33-1.amzn2023.0.5.x86_64
bind-9.18.33-1.amzn2023.0.5.x86_64