[CLSA-2026:1786881091] Fix CVE(s): CVE-2026-1519
Type:
security
Severity:
Important
Release date:
2026-08-16 11:51:42 UTC
Description:
* SECURITY UPDATE: excessive NSEC3 iterations CPU denial of service during insecure delegation validation - debian/patches/CVE-2026-1519.patch: cap NSEC3 iterations at DNS_NSEC3_MAXITERATIONS (150) in isdelegation() and skip already-trusted rdatasets during the insecurity proof, and require dns_trust_secure before the iteration test so an unvalidated opt-out NSEC3 cannot short-circuit the proof (upstream follow-up 1bd458d3ba, bind9#5970) - CVE-2026-1519
CVEs fixed:
Updated packages:
  • bind9_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:d6c50d386bad605f87b63384ea405b79c00fe895
  • bind9-doc_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_all.deb
    sha:9048e1aec60d127acaa33245f93a767e403bad3d
  • bind9-host_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:6b4b4663636fe8ca46b3b2003bd2a92be15dfa0f
  • bind9utils_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:5b84906a94ee626479ce227b857f59bc835a6acd
  • dnsutils_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:e109cf9927bf0b835bea9ea53b9d49706124bb33
  • host_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_all.deb
    sha:406870cd5179077bd3608728753492ad280b7453
  • libbind-dev_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:dc1bf51501ea6b87ed6e5219d58e91ecba78a81c
  • libbind-export-dev_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:a76ab162021e3105787b3f704d4ac898407345fd
  • libbind9-140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:051ef1ca52a9597adc233bb418beb0ddacb46113
  • libdns-export162_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:1b7c13deb4716f9de6df05a6bd1dd07062b137d1
  • libdns162_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:94051fc338f0a26699662b720178a781af771291
  • libirs-export141_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:2f6078cf2e0edce4bec724d148e7ef4cc031ac2e
  • libirs141_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:15f4efc45a9a26e5b0e98e16b4978cd2e24643b7
  • libisc-export160_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:682200e1dcced95a368ea5909d316b7e48b856aa
  • libisc160_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:363716f526098199f94778d790df185217bd965f
  • libisccc-export140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:ff6e7cc7c3e0e8bea144399ebbaa5fd58530d0ae
  • libisccc140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:1d06ac3311880d4a0ef276cdf1f40df7306a888a
  • libisccfg-export140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:b58d88bb392fdc829095b9b369314a0f2cc76fad
  • libisccfg140_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:a78f87bda94dfaf1f055d6b3495b939745916cba
  • liblwres141_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:e9cd996d72dd19526839edefb42549ff588ad336
  • lwresd_9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els11_amd64.deb
    sha:25074fc722815323d60711766e0110302959fd5c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.