[CLSA-2026:1790158621] Fix CVE(s): CVE-2026-5946
Type:
security
Severity:
Important
Release date:
2026-09-23 10:17:11 UTC
Description:
* SECURITY UPDATE: assertion failures in named when handling DNS messages whose CLASS is not IN or that use the meta-classes ANY or NONE - debian/patches/CVE-2026-5946-1.patch: force recursion off and set the allow-recursion ACLs to none for views with a class other than IN - debian/patches/CVE-2026-5946-2.patch: return NOTIMP for UPDATE and NOTIFY in non-IN views, check the class before treating WKS rdata as class IN, and assert that updated zones are class IN - debian/patches/CVE-2026-5946-3.patch: validate the message CLASS early, returning NOTIMP for unsupported classes and FORMERR for NONE outside UPDATE and ANY outside TKEY negotiation - debian/patches/CVE-2026-5946-4.patch: reject UPDATE and NOTIFY messages whose question class is ANY or NONE with FORMERR - debian/patches/CVE-2026-5946-5.patch: skip deny-answer-address matching for non-IN address records - CVE-2026-5946
CVEs fixed:
Updated packages:
  • bind9_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:b3449ae228d606bc984358baed98994c0eedb7ea
  • bind9-doc_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_all.deb
    sha:4cec3d731f57331ae549aefb69335b58303d356a
  • bind9-host_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:d7d218b2cb0ceba265436ac4a3586306946b1d65
  • bind9utils_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:bf33eca693d7e9e5b50a553490d6ee2a65751de5
  • dnsutils_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:266f233df8c1747ca34e1feb0c6f879562c7fd1d
  • host_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_all.deb
    sha:fb2b7e0a55193fd3603bfcbd6c05d2fa831a4730
  • libbind-dev_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:07847eb136214365b687d902275c00607b352d42
  • libbind-export-dev_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:b14ddda46a07e143896f6f708ded6864f0a91df5
  • libbind9-140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:5fd3f68d25021bb0dfe0eccbfd9e0782299fee18
  • libdns-export162_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:aed5efca4c3ec232f11586f5eb76268a08bbb4d3
  • libdns162_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:61d09d7f468590c91aba987736848ac5d1458e49
  • libirs-export141_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:f4a6b4bccdbb7aac936bbfe524371fbecd251a9d
  • libirs141_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:ae350cfe082eb5e566be9899f0e20992b64d4c4f
  • libisc-export160_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:779ca83b301398f33a07735fb95ad50fd1182895
  • libisc160_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:86912f5bd14b30b9458eee392496c9ff55ed6973
  • libisccc-export140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:47874646f16a47bc6e068c1ec386e52bc681498e
  • libisccc140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:d653fb46345bf2f6a807966a0c3bb79cd1e60d92
  • libisccfg-export140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:50d2b0abcdd04920fb74c8b4298df3f911eaea30
  • libisccfg140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:2363d5e01e23b8b8b1e6ea01f621271abecbd099
  • liblwres141_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:13f73f4b1e1264ee94ddc290aecfaa30c3e2bdc1
  • lwresd_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els13_amd64.deb
    sha:c71e96e7ac772df8c799c24dcdfb38edba466c31
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.