{"id":"CLSA-2026-1790583590","summary":"bind: Fix of 3 CVEs","details":"- CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in\n  query_find(), so query_addnoqnameproof() no longer dereferences the rdataset\n  that query_filter64() has already returned to the message rdataset pool\n- CVE-2026-19667: reject negative cache records that do not fit in a\n  dns_rdata_t; copy_rdataset()/addoptout() now bound the assembled record by\n  DNS_RDATA_MAXLENGTH instead of letting a 64 KiB record reach\n  dns_rdataslab_fromrdataset(), where it trips INSIST(length \u003c= 0xffff) and\n  aborts named\n- CVE-2026-80274: record the denial type (NSEC or NSEC3) next to the NOQNAME\n  proof owner so isc__rdatalist_getnoqname() returns the same denial record\n  isc__rdatalist_addnoqname() selected, instead of the first one in wire order","modified":"2026-10-26T09:30:55.768088625Z","published":"2026-09-28T08:20:02Z","upstream":["CVE-2026-19666","CVE-2026-19667","CVE-2026-80274"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1790583590.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19666"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19667"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80274"}],"affected":[{"package":{"name":"bind","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-chroot","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-chroot?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-export-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-export-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-export-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-export-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-libs-lite","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-libs-lite?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-license","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-license?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-lite-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-lite-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-pkcs11","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-pkcs11?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-pkcs11-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-pkcs11-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-pkcs11-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-pkcs11-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-pkcs11-utils","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-pkcs11-utils?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-sdb","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-sdb?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-sdb-chroot","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-sdb-chroot?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"bind-utils","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bind-utils?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}},{"package":{"name":"python3-bind","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/python3-bind?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1790583590.json"}}],"schema_version":"1.9.0"}