Ubuntu notice USN-8969-1 covers many BIND DNS server vulnerabilities
VULNERABILITYUbunturedteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Ubuntu notice USN-8969-1 lists about twenty BIND flaws, most of them denial-of-service issues such as crashes, memory exhaustion and CPU exhaustion. Several could let remote attackers forge NXDOMAIN answers, inject zone contents into a secondary server, or cause cache poisoning, and CVE-2026-77119 enables a DNSSEC downgrade. The notice states that most flaws affect Ubuntu 26.10, and CVE-2026-94300 is described as a possible route to memory corruption and arbitrary code execution.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check whether any servers run BIND on Ubuntu 26.10 and review the Ubuntu notice USN-8969-1 for the fixed packages.
- Install the updated BIND packages once they are available on your systems.
- Prioritise secondary servers that accept zone transfers, given the TSIG and cache poisoning issues.
Written by AI from the sources, checked against them
Full story timeline · 1 update
- Tue 3 NovemberUSN-8969-1: Bind vulnerabilitiesUbuntu Security Notices
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products