{"id":"CLSA-2026-1792167008","aliases":[],"status":"published","title":"Fix of 8 CVEs","description":"* Add the root KSK-2024 (key tag 38696) trust anchor; fresh installs\n     cannot validate the root zone after the 2026-10-11 KSK rollover\n     - debian/patches/update-root-ksk-38696.patch: add the 38696 initial-ds\n       entry to bind.keys (upstream 089d0eb30a).","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-10-16T16:10:26Z","modified":"2026-10-26T09:32:06Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-dnsutils","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-doc","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-host","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-libs","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-utils","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9utils","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"dnsutils","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-dnsutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"bind9utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"dnsutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+tuxcare.els6"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1792167008.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11331","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11622","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13321","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19666","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19667","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80274","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81736","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1792167008","title":"Fix of 8 CVEs","description":"   * Add the root KSK-2024 (key tag 38696) trust anchor; fresh installs\n     cannot validate the root zone after the 2026-10-11 KSK rollover\n     - debian/patches/update-root-ksk-38696.patch: add the 38696 initial-ds\n       entry to bind.keys (upstream 089d0eb30a).","status":"published","published":"2026-10-16T16:10:26Z","modified":"2026-10-26T09:32:06.36070599Z","updated_at":"2026-11-02T15:43:51.747192Z"}]}}