Ubuntu alert USN-8682-1 (bind9)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8682-1] Bind vulnerabilities
Date:
             
 
Wed, 26 Aug 2026 23:14:44 +0000
Message-ID:
             
 
<E1wzMpQ-0001HG-4s@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8682-1
August 26, 2026

bind9 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in Bind.

Software Description:
- bind9: Internet Domain Name Server

Details:

Vitaly Simonovich discovered that Bind could exhaust memory during
GSS-API TKEY negotiation. A remote attacker could possibly use this
issue to cause Bind to use excessive resources, leading to a denial of
service. (CVE-2026-3039)

Shuhan Zhang discovered that Bind incorrectly handled self-pointed glue
records. A remote attacker could possibly use this issue to use Bind in
denial of service amplification attacks against other systems.
This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2026-3592)

It was discovered that Bind incorrectly handled DNS messages whose
class was not IN. A remote attacker could possibly use this issue to
cause Bind to crash, resulting in a denial of service. This issue only
affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2026-5946)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  bind9                           1:9.18.30-0ubuntu0.20.04.2+esm2
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  bind9                           1:9.11.3+dfsg-1ubuntu1.19+esm5
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  bind9                           1:9.10.3.dfsg.P4-8ubuntu1.19+esm10
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  bind9                           1:9.9.5.dfsg-3ubuntu0.19+esm14
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8682-1
  CVE-2026-3039, CVE-2026-3592, CVE-2026-5946


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmqPWUoACgkQcpJm3tlz
hgEQjw//WdgulirdyzIB5Ljzh8IAPknEZrknu3Vq7wGLnz6lg8+ova7DOumjB40c
zoXuZE3TaF7GHIG36lvT0GSmyBPx2eCvP9RaS8fP6KKEywoD+ww02KgRSIeKurLt
2WUai63DpB4lf6qJCcDBbFlDFEpcRR5BVwrGGNfjvVnUC+hae4FsYVma0wI8+xtp
UeFMPOE8UVJGV4Yc6H9aGvsN7+q/V8ISMpb4AEpAi21yTqJ1ImtTdaj/k19IQeT9
Kvpr/IA1m5MbVH4QQuE57IM5oInIIbfjJAosRf1SM9WdQ54+w3RUBwaafS7dVoi5
ODktg1YlY4JI4OI0yPGTUfd59L6fUeksSR1cvJLh4st2+QJb9+IWirLqXYus7ncf
txP/Pit5BYusjmHwL6xa4gznbxMNZ2hY9VZLtLrEA33btwZfASz3gIQpo7RviquH
XiBX12vlQWi+ABssFlBLWPKk2TD4aS2jlELhmHmacs6UtESpf0xcWLyO7peLVjcA
Sr/pJVm9rAm6IgVhWAui7KHBtPO0k2PkRuyg047V9Z2dmC4ACmjuIAmUFhnP4jch
HVYV1R0cIQK4uE1mrZAoAlXMtKqwq0cp5r7K8d2EJlrHVJRtK9QWsvgJf0n4ezad
gZD+dByDObfReOdMPLeovQoVVV96kV9ksEXZEmlFPdUCRs5R0Gc=
=VQdx
-----END PGP SIGNATURE-----