[Git][security-tracker-team/security-tracker][master] bind9.18 commit

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6dbb3842 by Bastien Roucariès at 2026-10-13T17:29:42+02:00
bind9.18 commit

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36548,18 +36548,23 @@ CVE-2026-19033 (For a secondary zone with transfers restricted by TSIG, `named`
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
 	NOTE: https://kb.isc.org/docs/cve-2026-19033
+	NOTE: https://github.com/isc-projects/bind9/commit/5330f5ffbd864ff283c68116fdde59e2ae97bdaf (bind-9.18)
 CVE-2026-19662 (An attacker may be able to cause a `named` resolver to abort. The atta ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
 	NOTE: https://kb.isc.org/docs/cve-2026-19662
+	NOTE: https://github.com/isc-projects/bind9/commit/794b0dff3cda4d0f4bcb05d07a134def3f75ab90 (bind-9.18)
 CVE-2026-19666 (On a resolver configured to use ``dns64``, if an applicable answer fro ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
 	NOTE: https://kb.isc.org/docs/cve-2026-19666
+	NOTE: https://github.com/isc-projects/bind9/commit/78175f9749fecdac4eb0d4b08dd064968b4c55f8 (bind-9.18)
 CVE-2026-19667 (If an attacker-controlled authoritative server can produce a negative  ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
 	NOTE: https://kb.isc.org/docs/cve-2026-19667
+	NOTE: [1/2] https://github.com/isc-projects/bind9/commit/993d10fe15adbac485d399f1e4144b55ed226ecf (bind-9.18)
+	NOTE: [2/2] https://github.com/isc-projects/bind9/commit/c4203fb70e3985452afddeadb7075aa91ae05d7d (bind-9.18)
 CVE-2026-19668 (A BIND recursive resolver may experience excessive resource consumptio ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
@@ -36568,10 +36573,12 @@ CVE-2026-19941 (An inapplicable NSEC record may be accepted by a `named` resolve
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
 	NOTE: https://kb.isc.org/docs/cve-2026-19941
+	NOTE: https://github.com/isc-projects/bind9/commit/d9ae565b8aa553ccf025cb8fef842b2f5ad2f2e2 (bind-9.18)
 CVE-2026-75029 (In a query response, an attacker may send `named` multiple copies of a ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
 	NOTE: https://kb.isc.org/docs/cve-2026-75029
+	NOTE: https://github.com/isc-projects/bind9/commit/e3eeb6d9846b27758e076955b8310856b8d5d515 (bind-9.18)
 CVE-2026-76163 (If BIND is loaded with a "`named.conf`" file that contains no global " ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
@@ -36580,6 +36587,7 @@ CVE-2026-77119 (A validly signed NSEC3 from an unrelated sibling zone may be acc
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
 	NOTE: https://kb.isc.org/docs/cve-2026-77119
+	NOTE: https://github.com/isc-projects/bind9/commit/c9cb6a5e24e43489cf3fd4d4cc2193b6a74499cb (bind-9.18)
 CVE-2026-77692 (An attacker can cause `named` to abort by sending a crafted DNS-over-H ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
@@ -36588,17 +36596,21 @@ CVE-2026-78301 (A malformed zone may contain an NS or DNAME node above its origi
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
 	NOTE: https://kb.isc.org/docs/cve-2026-78301
+	NOTE: https://github.com/isc-projects/bind9/commit/a638cd47dc2b66e98cd912eb6fe090c6a72b14f6 (bind-9.18)
 CVE-2026-80274 (If a BIND resolver sends a query for a DNSSEC-signed authoritative zon ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
 	NOTE: https://kb.isc.org/docs/cve-2026-80274
+	NOTE: https://github.com/isc-projects/bind9/commit/2c72008b25c916d75dd4df34550954feb75a1ccd (bind-9.18)
 CVE-2026-81563 (A BIND resolver encountering an SVCB/HTTPS AliasMode record referencin ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
 	NOTE: https://kb.isc.org/docs/cve-2026-81563
+	NOTE: https://github.com/isc-projects/bind9/commit/2c06dd156f2338bb873d7ae775a7e2fca37d0bc9 (bind-9.18)
 CVE-2026-81736 (If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records,  ...)
 	{DSA-6505-1}
 	- bind9 1:9.20.29-1
+	NOTE: https://github.com/isc-projects/bind9/commit/17177ec18a4a62b7c67a6d76b3e8efb94886caa6 (bind-9.18)
 	NOTE: https://kb.isc.org/docs/cve-2026-81736
 CVE-2026-81642 (In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was  ...)
 	{DSA-6507-1}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6dbb3842dd478e8081b390ad414b98b08827fc7d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6dbb3842dd478e8081b390ad414b98b08827fc7d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/0119e1ea/attachment.htm>