Ubuntu 26.10 gets Unbound fixes from USN-8946-1
CVE-2026-80225 can let a remote attacker exhaust Unbound resources over TCP on listed LTS releases.
Stories per day · 30 days
4 RSS
Relateddenial-of-service9tls6brotli5dnssec5ubuntu5bind4nodejs4unbound3cisco2domain-shadowing2illegal-gambling2isc2powerdns2rce2advisory1authoritative-dns1authoritative-server1cache-poisoning1
72 stories, newest first · one card per story
Stories tagged #dns
The race to secure record-like information for domains
Signed MX adoption is 12.3% in the Tranco top 1,000 and 1.4% of .COM, so apps cannot assume DNSSEC.
Node.js schedules security fixes for 22.x 24.x and 26.x lines
Node.js will release high-severity patches for supported 22.x 24.x and 26.x branches on or after November 11 2026 following earlier TLS DNS and Brotli fixes.
1
Bind vulnerabilities allow denial of service in Ubuntu 26.10
Bind mishandling of DNS messages and DNSSEC proofs could cause excessive memory use or crashes in Ubuntu 26.10.
Cloudflare halves DNS build delay and cuts memory use 85%
A targeted planner skips full rebuilds of zones with tens of millions of records as changes rose from about 250 to 700 per second.
1
Cisco warns October 2026 Node.js flaws can enable RCE
High-SIR issues include a Brotli out-of-bounds write and DNS truncation with an embedded NUL; fixes cover 22.x, 24.x, and 26.x.
School and government DNS abused to promote illegal gambling
Infoblox found two operations using CNAME aliases and nameserver delegations; it does not report malware or stolen data.
3
Attackers shadow Indian government domains to promote illegal gambling sites
Infoblox says unauthorized NS delegations on maharashtra.gov.in and a separate Hidden Hawk operation abused school and government domains for SEO.
4
October 2026 Node.js flaws affect Cisco products, Cisco says
High-rated issues include a Brotli out-of-bounds write that could allow remote code execution.
ICANN speeds quantum-safe DNSSEC work as larger keys strain DNS
Crain now puts readiness at three to five years, not ten, while Category 1 domains show 45 percent higher abuse odds.
Counterfeit Google certificates tied to ccTLD DNS domain-identity theft
Akamai says control of a domain's DNS can also give control of certificates issued for that identity.
2
Node.js patches 10 flaws, including Brotli decoder RCE
Fixed builds are 26.12.1, 24.22.1, and 22.23.4; the advisory gives no evidence of active exploitation.
ISC BIND 9 flaws can exhaust resources or crash named
Four CVEs cover message-processing exhaustion, GSS-TSIG memory corruption, and unexpected exits.
Ubuntu c-ares flaws can crash the library or run code
SOA reply parsing can crash c-ares on Ubuntu 16.04 LTS and 18.04 LTS; a sortlist bug can run code on 16.04.
Node.js patches ten flaws, including Brotli decoder code execution
Patched builds are 26.12.1, 24.22.1 and 22.23.4; four of the ten issues are high severity.
Unbound 1.26.2 fixes high-severity DoQ use-after-free
CVE-2026-97206 can cause a use-after-free during DoQ path migration on multi-threaded Unbound deployments.
PowerDNS Recursor 5.3.12 and 5.4.8 fix multiple flaws
Advisory 2026-12 covers three high-severity CVEs; only CVE-2026-73206 is named in the notice.
ISC discloses four vulnerabilities in BIND 9
One issue, CVE-2026-96888, can make named terminate when a redirect zone uses strict QNAME checks.
Ubuntu fixes Unbound denial-of-service flaws in USN-8946-1
Crafted TCP connections or DNS responses can exhaust resources or crash Unbound; fixed package versions are not in the excerpt.
Meta pauses Muse share links after chats found on the web
Claroc rebuilt more than 6,800 Muse share URLs from public DNS records, exposing business and personal chats.
NSD 4.15.3 security release
NSD 4.15.3 fixes high-severity stack-overwrite bugs that could enable remote code execution.
Root DNSSEC trust anchors
IANA's root DNSSEC KSK-2024, key tag 38696, began signing the root DNSKEY set on October 11, 2026.
USN-8929-1: Bind vulnerabilities
Ubuntu patched Bind flaws that could cause denial of service or DNS cache poisoning.
New gTLD Application for .lan
ICANN has published a new generic top-level domain application for .lan.