CLSA-2026-1787093019
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787093019.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1787093019
- Upstream
- Published
- 2026-08-18T22:43:49Z
- Modified
- 2026-10-26T09:31:52Z
- Summary
- Fix CVE(s): CVE-2026-1519
- Details
-
- SECURITY UPDATE: a resolver performing DNSSEC validation could consume excessive CPU on a maliciously crafted zone (unbounded NSEC3 iterations when validating referrals to unsigned delegations)
- debian/patches/CVE-2026-1519.patch: a resolver performing DNSSEC validation could consume excessive CPU on a maliciously crafted zone (unbounded NSEC3 iterations when validating referrals to unsigned delegations)
- CVE-2026-1519
- Build the lib/dns "gen" host tool with large-file support to fix an
armel FTBFS: "gen" scans the rdata directories with a non-LFS readdir(),
which aborts with EOVERFLOW on 64-bit inodes/offsets on 32-bit
architectures. next_file() in lib/dns/gen-unix.h treats the resulting
NULL as end-of-directory, so the scan was silently truncated and "gen"
emitted an incomplete include/dns/rdatastruct.h.
- debian/patches/gen-build-largefile-source.patch
- SECURITY UPDATE: a resolver performing DNSSEC validation could consume excessive CPU on a maliciously crafted zone (unbounded NSEC3 iterations when validating referrals to unsigned delegations)
- References