[CLSA-2026:1791197965] Fix CVE(s): CVE-2026-19666, CVE-2026-80274
Type:
security
Severity:
Important
Release date:
2026-10-05 10:59:39 UTC
Description:
* SECURITY UPDATE: a resolver using dns64 with break-dnssec yes could abort when a partially excluded AAAA RRset had been cached with a NOQNAME proof (use-after-free on the filter64 path) - debian/patches/CVE-2026-19666.patch: clear the NOQNAME proof alias on the DNS64 filter64 path (upstream c185a0d8c5) - CVE-2026-19666 * SECURITY UPDATE: a resolver could abort on a wildcard answer whose NOQNAME proof owner carries both a signed NSEC3 and an unsigned NSEC, because the proof was selected by wire position when caching and when serving - debian/patches/CVE-2026-80274.patch: record the denial type the validator accepted and use it when caching and serving the NOQNAME proof (upstream 2db650ce4e); adds dns_rdataset_addnoqnametype() rather than changing the dns_rdataset_addnoqname() ABI - debian/libdns1104.symbols: record dns_rdataset_addnoqnametype(), added so dns_rdataset_addnoqname() keeps its signature - CVE-2026-80274
CVEs fixed:
Updated packages:
  • bind9_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:90651c72720e235687b4db763973ff42d5327e41
  • bind9-doc_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_all.deb
    sha:7eda64d1abfc660cd57a5e0676e56b52a4c6910f
  • bind9-host_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:e90e75d53acadfed276da32dd071730312e83b1e
  • bind9utils_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:7fa3de350882c458a3fd856fc302dfd04dbeaa46
  • dnsutils_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:dead9e9a8542c4dce559a0677a287a6e6da1a314
  • libbind-dev_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:4ae738cd4976d328a883ffb9a51d07e156457e3b
  • libbind-export-dev_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:bd86d2d43be68d310a37d276beac455a803adbca
  • libbind9-161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:3dfb5dd6a2c6cb8d5249ebc3eceee08163c7c4af
  • libdns-export1104_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:e1ccb1f4973231a7da124c45474d36096b7d998f
  • libdns1104_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:05e47ae70172c1aa04ece3af689885cc11b21bce
  • libirs-export161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:8d447767489832a3df6ec3729caa5197943f8515
  • libirs161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:4d466b6c0227e6475232425c9666366d02a3ea9e
  • libisc-export1100_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:8250d1ecfc257abbaf602c036e724e29ae153290
  • libisc1100_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:a0c16fb0de90313e3d30edd22c423239301c8453
  • libisccc-export161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:96d2c7a474625544cc50c6ffa41e7f30e834a254
  • libisccc161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:46c77c8ff7e2b6fb5190edcfb28530e57087332e
  • libisccfg-export163_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:2fabae092d9742c21e008de4b0a406afba6fe372
  • libisccfg163_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:a651e71b825bbce965e1bddf1947179a1c720404
  • liblwres161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_amd64.deb
    sha:2cb9404d13b3a74dc32bf5712fad604114e446aa
  • bind9_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:b2feef9b1fd89cb2b730146ef909c3e622269a89
  • bind9-host_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:cc24ac27cadb49eeb55f666f3bb9686cb745b2a2
  • bind9utils_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:28d1defc5ac803a4dc8f54273357067e2136850b
  • dnsutils_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:b08475cf10b880e7e7f00a1ddf2af02aaf778540
  • libbind-dev_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:63d981bd6a1f10109da5e8d23e4eae5a1f0863d7
  • libbind-export-dev_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:8a0f62e25bcff7f752f157581eef676437859ae4
  • libbind9-161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:2a1047ee603f9d0f927fe3eb83c4debbeee8dc6b
  • libdns-export1104_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:55bc06b02b9bddc223530443def22485d2876f03
  • libdns1104_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:34961399dddc41793bcf3c5b7bf7d6307df506b4
  • libirs-export161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:5a8a413562fd502182bbc554b468b941dcdbc2fe
  • libirs161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:90e3f96591cc7fb9239c76251c2ad945aa8f8f92
  • libisc-export1100_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:92f7cee4369b678b6ca66a2704b823653a7737b6
  • libisc1100_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:8333a948d797c2639152000289db73b1dfbe410d
  • libisccc-export161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:9bd9c7a7283b9f60928b8422411f573b76547894
  • libisccc161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:dfca98ba743487fb26c81309a195bf1e95d87e87
  • libisccfg-export163_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:d12f0d131c580d35d0e7c462a5b8a94153938031
  • libisccfg163_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:42e7fa60482c6a0fd0064e64016f19d042c4ace2
  • liblwres161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_arm64.deb
    sha:a93754401914e29a922f3c28bf153c45a00f4bba
  • bind9_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:5298224829764b66a00e68cd987d90201826da17
  • bind9-host_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:f1fa2c829ac8abde9fcd0073a089f7774d2eafcd
  • bind9utils_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:5543a51ca6cb89587c2322d5f83456c890859f13
  • dnsutils_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:dc9929f3fbc3026dd9a57840653e3c44b77e4cce
  • libbind-dev_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:a5269c1542cd1000df82e3a7441718ec0cb28a51
  • libbind-export-dev_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:b76cc332fac6e679c5f9c672871a4c096008e185
  • libbind9-161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:d49a9efd16f2ace973e0862232ea5b63b5212774
  • libdns-export1104_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:7c9a0754be9d5fc0f51a6db9eeba3f226baab4cf
  • libdns1104_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:68dd1575f25a24e00a14aa60a09757daed4bb708
  • libirs-export161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:aabfc75c580c06f8c3343060f195c3e7c5bf4b13
  • libirs161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:37ff699821a43c83c4ee8f8bb4da19deb1f5f13e
  • libisc-export1100_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:31debe85eaa48430cddb7157547b02ed85a5eda1
  • libisc1100_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:dba3da83cb25b715a27b2808eb9852ade98e232a
  • libisccc-export161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:d567d4b9b8389c4b1745f6550de7a69bd4f48357
  • libisccc161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:6b486ca4f15303488d58abae83529e8403daee84
  • libisccfg-export163_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:b5e79cb657960dbd52995448a64d55e413b25479
  • libisccfg163_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:8338b84672d3e998a4b376ea1150209ac5911553
  • liblwres161_9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6_armel.deb
    sha:2ebae84f49c997e3d013e9e2a660b0057f84d152
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.