Multiple security vulnerabilities have been identified in BIND 9 DNS server versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, and 9.21.0 through 9.21.26, including variants with the -S1 suffix. These include excessive resource consumption from specially crafted DNS messages, memory corruption and potential remote code execution via replayed GSS-TSIG signed UDP messages, assertion failures causing server aborts when processing redirect zones with qname-minimization strict enabled, and denial of service from recursive query handling with specific RPZ zone configurations. A fixed version 9.16.23-34.oe2203sp4 is available addressing these issues.