CLSA-2026-1790158621
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1790158621.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1790158621
- Upstream
- Published
- 2026-09-23T10:17:11Z
- Modified
- 2026-10-26T09:32:02Z
- Summary
- Fix CVE(s): CVE-2026-5946
- Details
-
- SECURITY UPDATE: assertion failures in named when handling DNS messages
whose CLASS is not IN or that use the meta-classes ANY or NONE
- debian/patches/CVE-2026-5946-1.patch: force recursion off and set the allow-recursion ACLs to none for views with a class other than IN
- debian/patches/CVE-2026-5946-2.patch: return NOTIMP for UPDATE and NOTIFY in non-IN views, check the class before treating WKS rdata as class IN, and assert that updated zones are class IN
- debian/patches/CVE-2026-5946-3.patch: validate the message CLASS early, returning NOTIMP for unsupported classes and FORMERR for NONE outside UPDATE and ANY outside TKEY negotiation
- debian/patches/CVE-2026-5946-4.patch: reject UPDATE and NOTIFY messages whose question class is ANY or NONE with FORMERR
- debian/patches/CVE-2026-5946-5.patch: skip deny-answer-address matching for non-IN address records
- CVE-2026-5946
- SECURITY UPDATE: assertion failures in named when handling DNS messages
whose CLASS is not IN or that use the meta-classes ANY or NONE
- References