[CLSA-2026:1787093019] Fix CVE(s): CVE-2026-1519
Type:
security
Severity:
Important
Release date:
2026-08-18 22:43:49 UTC
Description:
* SECURITY UPDATE: a resolver performing DNSSEC validation could consume excessive CPU on a maliciously crafted zone (unbounded NSEC3 iterations when validating referrals to unsigned delegations) - debian/patches/CVE-2026-1519.patch: a resolver performing DNSSEC validation could consume excessive CPU on a maliciously crafted zone (unbounded NSEC3 iterations when validating referrals to unsigned delegations) - CVE-2026-1519 * Build the lib/dns "gen" host tool with large-file support to fix an armel FTBFS: "gen" scans the rdata directories with a non-LFS readdir(), which aborts with EOVERFLOW on 64-bit inodes/offsets on 32-bit architectures. next_file() in lib/dns/gen-unix.h treats the resulting NULL as end-of-directory, so the scan was silently truncated and "gen" emitted an incomplete include/dns/rdatastruct.h. - debian/patches/gen-build-largefile-source.patch
CVEs fixed:
Updated packages:
  • bind9_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:feb6bc6049d2a0f086de002192db9dbb47dc0d4c
  • bind9-doc_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_all.deb
    sha:21557f844ce7774c74704b5b15e7b1c18eb5a0d5
  • bind9-host_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:bb4017ecf3475487e0ca3a5fb310fa0323a78d7b
  • bind9utils_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:cccf3b76ab728fee6931d1f1f21475684583d2f7
  • dnsutils_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:b2b6804885646561480c72fb241ffaffd2389df6
  • libbind-dev_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:fe7d63d3536b0bfbbd77e4ab9a51f8f3c1d30b64
  • libbind-export-dev_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:39fa7aec9cd76101f5e4018598b1f9aeba6a2c70
  • libbind9-161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:8c175788966255f03b433f5808ad0b3a223ab24d
  • libdns-export1104_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:82c1eb6d7da49935410c14815a4414cc1ed88d10
  • libdns1104_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:ddc324ed011c5d57f4c2ff666d4e34695b1cd707
  • libirs-export161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:506836dc789a2dd08d490f9dfeabf43875f9cd81
  • libirs161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:a9b3cec1ba4051a358967e47178240b8087e9449
  • libisc-export1100_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:b37f129c8479c41d521c085958c451d3a49579cc
  • libisc1100_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:c374e2f9b1c4b3207adb9cd0515267867f40b16e
  • libisccc-export161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:6359692cf2e5e97ff6e1f961ef08eabaf321f9e0
  • libisccc161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:364100ff231e3be5239d2c641abf4a7dc0bae3a0
  • libisccfg-export163_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:a8f20d742327962e261cdff9e8234ec26a7ecab0
  • libisccfg163_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:cf1334ba3ebd0f2009e23122273629122d55525d
  • liblwres161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els4_amd64.deb
    sha:aceb16908be04702e38f02cce805a202597a01b0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.