{"id":"CLSA-2026-1780406874","summary":"Fix CVE(s): CVE-2026-3039, CVE-2026-5946","details":"   * SECURITY UPDATE: Multiple assertion failures in named when handling DNS\n     messages with non-IN class (CHAOS, HESIOD) or meta-classes (ANY, NONE)\n     in UPDATE, NOTIFY, and recursion paths\n     - debian/patches/CVE-2026-5946.patch: disable recursion for non-IN views,\n       reject UPDATE and NOTIFY for non-IN classes, validate DNS message CLASS\n       early in request processing, reject NONE/ANY meta-classes in UPDATE and\n       NOTIFY questions, and skip deny-answer-address for non-IN addresses in\n       bin/named/server.c, lib/bind9/check.c, lib/dns/adb.c,\n       lib/dns/message.c, lib/dns/resolver.c, lib/ns/client.c, lib/ns/update.c\n     - CVE-2026-5946","modified":"2026-06-04T09:47:09.512732979Z","published":"2026-06-02T17:33:41Z","upstream":["CVE-2026-3039","CVE-2026-5946"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1780406874.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3039"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5946"}],"affected":[{"package":{"name":"bind9","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/bind9?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1780406874.json"}},{"package":{"name":"bind9-dnsutils","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/bind9-dnsutils?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1780406874.json"}},{"package":{"name":"bind9-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/bind9-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1780406874.json"}},{"package":{"name":"bind9-host","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/bind9-host?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1780406874.json"}},{"package":{"name":"bind9-libs","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/bind9-libs?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1780406874.json"}},{"package":{"name":"bind9-utils","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/bind9-utils?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1780406874.json"}},{"package":{"name":"bind9utils","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/bind9utils?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1780406874.json"}},{"package":{"name":"dnsutils","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/dnsutils?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1780406874.json"}}],"schema_version":"1.7.5"}