Ubuntu alert USN-8696-1 (bind9)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8696-1] Bind vulnerability
Date:
             
 
Mon, 31 Aug 2026 14:09:17 +0000
Message-ID:
             
 
<E1x12hJ-0004YJ-DR@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8696-1
August 31, 2026

bind9 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Bind could be made to crash if it received specially crafted network
traffic.

Software Description:
- bind9: Internet Domain Name Server

Details:

It was discovered that Bind incorrectly handled DNSSEC validation when a
domain was covered by both NSEC and NSEC3 records with only one type having
an RRSIG. A remote attacker could possibly use this issue to cause Bind to
crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  bind9                           1:9.20.24-1ubuntu0.3

Ubuntu 24.04 LTS
  bind9                           1:9.18.39-0ubuntu0.24.04.7

Ubuntu 22.04 LTS
  bind9                           1:9.18.39-0ubuntu0.22.04.6

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8696-1
  CVE-2026-13204

Package Information:
  https://launchpad.net/ubuntu/+source/bind9/1:9.20.24-1ubu...
  https://launchpad.net/ubuntu/+source/bind9/1:9.18.39-0ubu...
  https://launchpad.net/ubuntu/+source/bind9/1:9.18.39-0ubu...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=7lxO
-----END PGP SIGNATURE-----