{"id":"CLSA-2026-1780054328","summary":"Fix CVE(s): CVE-2026-3039","details":"   * SECURITY UPDATE: GSS-API resource leak triggered by multi-round TKEY\n     - debian/patches/CVE-2026-3039.patch: reject GSS_S_CONTINUE_NEEDED in\n       dst_gssapi_acceptctx() and release the partial security context\n       and gouttoken so they don't accumulate per malicious TKEY query.\n     - CVE-2026-3039","modified":"2026-06-04T09:47:29.919859055Z","published":"2026-05-29T11:32:13Z","upstream":["CVE-2026-3039"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1780054328.html"}],"affected":[{"package":{"name":"bind9","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/bind9?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"bind9-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/bind9-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"bind9-host","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/bind9-host?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"bind9utils","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/bind9utils?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"dnsutils","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/dnsutils?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libbind-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libbind-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libbind-export-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libbind-export-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libbind9-160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libbind9-160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libdns-export1100","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libdns-export1100?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libdns1100","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libdns1100?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libirs-export160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libirs-export160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libirs160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libirs160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libisc-export169","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisc-export169?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libisc169","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisc169?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libisccc-export160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisccc-export160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libisccc160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisccc160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libisccfg-export160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisccfg-export160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"libisccfg160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisccfg160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}},{"package":{"name":"liblwres160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/liblwres160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1780054328.json"}}],"schema_version":"1.7.5"}