{"id":"CLSA-2026-1791197965","summary":"Fix CVE(s): CVE-2026-19666, CVE-2026-80274","details":"   * SECURITY UPDATE: a resolver using dns64 with break-dnssec yes could abort when a partially excluded AAAA RRset had been cached with a NOQNAME proof (use-after-free on the filter64 path)\n     - debian/patches/CVE-2026-19666.patch: clear the NOQNAME proof alias on the DNS64 filter64 path (upstream c185a0d8c5)\n     - CVE-2026-19666\n   * SECURITY UPDATE: a resolver could abort on a wildcard answer whose NOQNAME proof owner carries both a signed NSEC3 and an unsigned NSEC, because the proof was selected by wire position when caching and when serving\n     - debian/patches/CVE-2026-80274.patch: record the denial type the validator accepted and use it when caching and serving the NOQNAME proof (upstream 2db650ce4e); adds dns_rdataset_addnoqnametype() rather than changing the dns_rdataset_addnoqname() ABI\n     - debian/libdns1104.symbols: record dns_rdataset_addnoqnametype(), added so\n       dns_rdataset_addnoqname() keeps its signature\n     - CVE-2026-80274","modified":"2026-10-26T09:31:53.737996906Z","published":"2026-10-05T10:59:39Z","upstream":["CVE-2026-19666","CVE-2026-80274"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1791197965.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19666"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80274"}],"affected":[{"package":{"name":"bind9","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bind9?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"bind9-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bind9-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"bind9-host","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bind9-host?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"bind9utils","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/bind9utils?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"dnsutils","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/dnsutils?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libbind-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libbind-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libbind-export-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libbind-export-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libbind9-161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libbind9-161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libdns-export1104","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libdns-export1104?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libdns1104","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libdns1104?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libirs-export161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libirs-export161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libirs161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libirs161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libisc-export1100","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisc-export1100?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libisc1100","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisc1100?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libisccc-export161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisccc-export161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libisccc161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisccc161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libisccfg-export163","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisccfg-export163?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"libisccfg163","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libisccfg163?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}},{"package":{"name":"liblwres161","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/liblwres161?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791197965.json"}}],"schema_version":"1.9.0"}