CLSA-2026-1787731848

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1787731848
Upstream
CVE (3)
Published
2026-08-26T08:11:07Z
Modified
2026-10-26T09:32:03Z
Summary
Fix CVE(s): CVE-2025-40778, CVE-2025-8677, CVE-2026-1519
Details
  • SECURITY UPDATE: cache poisoning via unsolicited answer records
    • debian/patches/CVE-2025-40778.patch: require the NS RRset owner name to be an ancestor of the queried name, restrict cached glue to the NS bailiwick apex, and retry unsigned DNAME responses over TCP
    • CVE-2025-40778
  • SECURITY UPDATE: excessive NSEC3 iterations CPU denial of service during insecure delegation validation
    • debian/patches/CVE-2026-1519.patch: cap NSEC3 iterations at DNS_NSEC3_MAXITERATIONS (150) in isdelegation() and skip already-trusted rdatasets during the insecurity proof
    • CVE-2026-1519
References

Affected packages

TuxCare:Ubuntu:18.04
bind9

Package

Name
bind9
Purl
pkg:deb/tuxcare/bind9?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
bind9-doc

Package

Name
bind9-doc
Purl
pkg:deb/tuxcare/bind9-doc?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
bind9-host

Package

Name
bind9-host
Purl
pkg:deb/tuxcare/bind9-host?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
bind9utils

Package

Name
bind9utils
Purl
pkg:deb/tuxcare/bind9utils?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
dnsutils

Package

Name
dnsutils
Purl
pkg:deb/tuxcare/dnsutils?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libbind-dev

Package

Name
libbind-dev
Purl
pkg:deb/tuxcare/libbind-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libbind-export-dev

Package

Name
libbind-export-dev
Purl
pkg:deb/tuxcare/libbind-export-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libbind9-160

Package

Name
libbind9-160
Purl
pkg:deb/tuxcare/libbind9-160?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libdns-export1100

Package

Name
libdns-export1100
Purl
pkg:deb/tuxcare/libdns-export1100?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libdns1100

Package

Name
libdns1100
Purl
pkg:deb/tuxcare/libdns1100?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libirs-export160

Package

Name
libirs-export160
Purl
pkg:deb/tuxcare/libirs-export160?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libirs160

Package

Name
libirs160
Purl
pkg:deb/tuxcare/libirs160?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libisc-export169

Package

Name
libisc-export169
Purl
pkg:deb/tuxcare/libisc-export169?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libisc169

Package

Name
libisc169
Purl
pkg:deb/tuxcare/libisc169?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libisccc-export160

Package

Name
libisccc-export160
Purl
pkg:deb/tuxcare/libisccc-export160?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libisccc160

Package

Name
libisccc160
Purl
pkg:deb/tuxcare/libisccc160?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libisccfg-export160

Package

Name
libisccfg-export160
Purl
pkg:deb/tuxcare/libisccfg-export160?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
libisccfg160

Package

Name
libisccfg160
Purl
pkg:deb/tuxcare/libisccfg160?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"
liblwres160

Package

Name
liblwres160
Purl
pkg:deb/tuxcare/liblwres160?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787731848.json"