{"id":"CLSA-2026-1787731848","summary":"Fix CVE(s): CVE-2025-40778, CVE-2025-8677, CVE-2026-1519","details":"   * SECURITY UPDATE: cache poisoning via unsolicited answer records\n     - debian/patches/CVE-2025-40778.patch: require the NS RRset owner name\n       to be an ancestor of the queried name, restrict cached glue to the\n       NS bailiwick apex, and retry unsigned DNAME responses over TCP\n     - CVE-2025-40778\n   * SECURITY UPDATE: excessive NSEC3 iterations CPU denial of service\n     during insecure delegation validation\n     - debian/patches/CVE-2026-1519.patch: cap NSEC3 iterations at\n       DNS_NSEC3_MAXITERATIONS (150) in isdelegation() and skip\n       already-trusted rdatasets during the insecurity proof\n     - CVE-2026-1519","modified":"2026-10-26T09:32:03.720857305Z","published":"2026-08-26T08:11:07Z","upstream":["CVE-2025-40778","CVE-2025-8677","CVE-2026-1519"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787731848.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40778"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8677"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1519"}],"affected":[{"package":{"name":"bind9","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/bind9?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"bind9-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/bind9-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"bind9-host","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/bind9-host?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"bind9utils","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/bind9utils?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"dnsutils","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/dnsutils?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libbind-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libbind-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libbind-export-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libbind-export-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libbind9-160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libbind9-160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libdns-export1100","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libdns-export1100?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libdns1100","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libdns1100?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libirs-export160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libirs-export160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libirs160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libirs160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libisc-export169","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisc-export169?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libisc169","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisc169?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libisccc-export160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisccc-export160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libisccc160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisccc160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libisccfg-export160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisccfg-export160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"libisccfg160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libisccfg160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}},{"package":{"name":"liblwres160","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/liblwres160?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"}}],"schema_version":"1.9.0"}