Skip to content

fix(cve): CVE-2026-80274 - Keep NOQNAME proof selection consistent - #15

Open
deepin-ci-robot wants to merge 3 commits into
masterfrom
fix-cve/CVE-2026-80274
Open

deepin-ci-robot wants to merge 3 commits into
masterfrom
fix-cve/CVE-2026-80274

Conversation

@deepin-ci-robot

@deepin-ci-robot deepin-ci-robot commented Sep 20, 2026 •

Copy link
Copy Markdown
Contributor

CVE: CVE-2026-80274 (high) - Keep NOQNAME proof selection consistent
Upstream: https://github.com/isc-projects/bind9/commit/49f35a0d4d20737b2c2be77b0bf208d3078113ef.patch

Co-authored-by: hudeng hudeng@deepin.org
Generated-By: qwen3.6-35b


CVE: CVE-2026-81736 (high) - Bound the total additional processing for a single query
Upstream: https://github.com/isc-projects/bind9/commit/7fd25ab3b55b1f514a363ffce2735b42b7b361c9.patch

Co-authored-by: hudeng hudeng@deepin.org
Generated-By: qwen3.6-35b


CVE: CVE-2026-19667 (high) - If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts.
Upstream: isc-projects/bind9@8b20ed0

Co-authored-by: hudeng hudeng@deepin.org
Generated-By: qwen3.6-35b

CVE: CVE-2026-80274 (high) - Keep NOQNAME proof selection consistent
Upstream: https://github.com/isc-projects/bind9/commit/49f35a0d4d20737b2c2be77b0bf208d3078113ef.patch

Co-authored-by: hudeng <hudeng@deepin.org>
Generated-By: qwen3.6-35b
@github-actions

Copy link
Copy Markdown

TAG Bot

TAG: 1%9.20.23-1_deb13u1deepin13
EXISTED: no
DISTRIBUTION: unstable

@deepin-ci-robot

Copy link
Copy Markdown
Contributor Author

/hold
因为该quilt包的上游版本号变更,详情见: deepin-community/infra-settings#134

@deepin-ci-robot

Copy link
Copy Markdown
Contributor Author

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign yukarichiba for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

deepin-ci-robot and others added 2 commits September 20, 2026 23:04
…cessing for a single query

CVE: CVE-2026-81736 (high) - Bound the total additional processing for a single query
Upstream: https://github.com/isc-projects/bind9/commit/7fd25ab3b55b1f514a363ffce2735b42b7b361c9.patch

Co-authored-by: hudeng <hudeng@deepin.org>
Generated-By: qwen3.6-35b
…fit in a dns_rdata_t

CVE: CVE-2026-19667 (high) - If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts.
Upstream: isc-projects/bind9@8b20ed0

Co-authored-by: hudeng <hudeng@deepin.org>
Generated-By: qwen3.6-35b
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant