Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Bind vulnerabilities (USN-8929-1)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-8929-1. The text
# itself is copyright (C) Canonical, Inc. See
# <https://ubuntu.com/security/notices>. Ubuntu(R) is a registered
# trademark of Canonical, Inc.
##

include('compat.inc');

if (description)
{
  script_id(367203);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/19");

  script_cve_id(
    "CVE-2025-8677",
    "CVE-2025-40778",
    "CVE-2026-1519",
    "CVE-2026-10723",
    "CVE-2026-10822",
    "CVE-2026-11331",
    "CVE-2026-11622",
    "CVE-2026-11721",
    "CVE-2026-13204",
    "CVE-2026-13321",
    "CVE-2026-19033",
    "CVE-2026-19662",
    "CVE-2026-19666",
    "CVE-2026-19667",
    "CVE-2026-19668",
    "CVE-2026-19941",
    "CVE-2026-75029",
    "CVE-2026-76163",
    "CVE-2026-77119",
    "CVE-2026-77692",
    "CVE-2026-78301",
    "CVE-2026-80274",
    "CVE-2026-81563",
    "CVE-2026-81736"
  );
  script_xref(name:"IAVA", value:"2025-A-0800-S");
  script_xref(name:"IAVA", value:"2026-A-0269-S");
  script_xref(name:"IAVA", value:"2026-A-0764-S");
  script_xref(name:"IAVA", value:"2026-A-1029");
  script_xref(name:"USN", value:"8929-1");

  script_name(english:"Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Bind vulnerabilities (USN-8929-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Ubuntu host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages
installed that are affected by multiple vulnerabilities as referenced in the USN-8929-1 advisory.

    Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote
    attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of
    service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.
    (CVE-2025-8677)

    Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind incorrectly accepted certain
    records from answers. A remote attacker could possibly use this issue to perform a cache poisoning attack.
    This issue only affected Ubuntu 18.04 LTS. (CVE-2025-40778)

    Samy Medjahed discovered that Bind incorrectly handled insecure delegation validation. A remote attacker
    could possibly use this issue to cause excessive NSEC3 iterations, consuming CPU resources, and leading to
    a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and
    Ubuntu 20.04 LTS. (CVE-2026-1519)

    It was discovered that Bind incorrectly accepted NSEC3 records whose signer name did not match the owning
    zone. A remote attacker could possibly use this issue to perform NSEC3 impersonation attacks, bypassing
    DNSSEC validation. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and
    Ubuntu 20.04 LTS. (CVE-2026-10723)

    It was discovered that Bind incorrectly handled Key Records using the PRIVATEDNS algorithm. A remote
    attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. This
    issue only affected Ubuntu 20.04 LTS. (CVE-2026-10822)

    It was discovered that Bind incorrectly handled wildcard CNAME expansion in Response Policy Zones. A
    remote attacker could possibly use this issue to bypass configured RPZ policies. This issue only affected
    Ubuntu 20.04 LTS. (CVE-2026-11331)

    It was discovered that Bind incorrectly tracked memory usage in the DNS cache. A remote attacker could
    possibly use this issue to cause Bind to use memory beyond configured limits, leading to a denial of
    service. This issue only affected Ubuntu 20.04 LTS. (CVE-2026-11622)

    It was discovered that Bind incorrectly handled signed wildcard records with label count discrepancies and
    RRSIG validation. A remote attacker could possibly use this issue to perform cache poisoning attacks. This
    issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
    (CVE-2026-11721)

    It was discovered that Bind incorrectly handled DNSSEC validation when a domain was covered by both NSEC
    and NSEC3 records with only one type having an RRSIG. A remote attacker could possibly use this issue to
    cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu
    16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-13204)

    It was discovered that Bind incorrectly validated out-of-zone NSEC next owner names during DNSSEC
    validation. A remote attacker could possibly use this issue to bypass DNSSEC validation. This issue only
    affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-13321)

    It was discovered that Bind incorrectly served zone transfer data before verifying the TSIG signature on
    multi-message transfers. A remote attacker could possibly use this issue to send unauthorized zone
    contents to a secondary server. (CVE-2026-19033)

    It was discovered that Bind incorrectly handled the lifetime of cached DNSSEC proofs, leading to a use-
    after-free. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial
    of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu
    26.04 LTS. (CVE-2026-19662)

    It was discovered that Bind incorrectly handled certain malformed answers when configured to use DNS64. A
    remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.
    (CVE-2026-19666)

    It was discovered that Bind incorrectly handled oversized negative answers when storing them in the
    negative cache. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a
    denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and
    Ubuntu 26.04 LTS. (CVE-2026-19667)

    It was discovered that Bind incorrectly handled large numbers of certain invalid DNSSEC records during
    validation. A remote attacker could possibly use this issue to cause Bind to use excessive resources,
    leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-19668)

    It was discovered that Bind incorrectly accepted inapplicable NSEC records as proof that no wildcard
    existed. A remote attacker could possibly use this issue to forge NXDOMAIN responses, masking the
    existence of wildcard records. (CVE-2026-19941)

    It was discovered that Bind incorrectly handled repeated copies of records that should only appear once,
    such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use
    excessive memory, leading to a denial of service. (CVE-2026-75029)

    It was discovered that Bind incorrectly handled TKEY queries when the configuration did not contain a
    global options block. A remote attacker could possibly use this issue to cause Bind to crash, resulting in
    a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-76163)

    It was discovered that Bind incorrectly accepted NSEC3 records from unrelated sibling zones as proof of an
    insecure delegation. A remote attacker could possibly use this issue to bypass DNSSEC validation and
    inject forged unsigned answers. (CVE-2026-77119)

    It was discovered that Bind incorrectly handled DNS-over-HTTPS requests containing invalid SIG(0) records
    when the connection was closed prematurely. A remote attacker could possibly use this issue to cause Bind
    to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-77692)

    It was discovered that Bind incorrectly treated NS or DNAME records above the zone origin as zone cuts. An
    attacker could possibly use this issue to cause Bind to serve or cache out-of-zone data, resulting in
    cache poisoning. (CVE-2026-78301)

    It was discovered that Bind incorrectly handled wildcard answers with both NSEC3 and NSEC proofs at the
    same owner name. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a
    denial of service. (CVE-2026-80274)

    It was discovered that Bind incorrectly released resources when processing SVCB and HTTPS AliasMode
    records. A remote attacker could possibly use this issue to cause Bind to exhaust resources, leading to a
    denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and
    Ubuntu 26.04 LTS. (CVE-2026-81563)

    It was discovered that Bind incorrectly limited additional processing for cached SVCB and HTTPS AliasMode
    records. A remote attacker could possibly use this issue to cause Bind to use excessive CPU resources,
    leading to a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04
    LTS, and Ubuntu 26.04 LTS. (CVE-2026-81736)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/notices/USN-8929-1");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-13321");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/10/22");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/10/14");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/19");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:bind9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:bind9-dnsutils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:bind9-host");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:bind9-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:bind9-utils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:bind9utils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:dnsutils");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:host");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libbind9-140");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libbind9-160");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libbind9-90");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libdns-export1100");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libdns-export162");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libdns100");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libdns1100");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libdns162");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libirs-export141");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libirs-export160");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libirs141");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libirs160");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisc-export160");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisc-export169");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisc160");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisc169");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisc95");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisccc-export140");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisccc-export160");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisccc140");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisccc160");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisccc90");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisccfg-export140");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisccfg-export160");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisccfg140");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisccfg160");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libisccfg90");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:liblwres141");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:liblwres160");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:liblwres90");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:lwresd");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Ubuntu Local Security Checks");

  script_copyright(english:"Ubuntu Security Notice (C) 2026 Canonical, Inc. / NASL script (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/Ubuntu/release');
if ( isnull(os_release) ) audit(AUDIT_OS_NOT, 'Ubuntu');
os_release = chomp(os_release);
if (! ('14.04' >< os_release || '16.04' >< os_release || '18.04' >< os_release || '20.04' >< os_release || '22.04' >< os_release || '24.04' >< os_release || '26.04' >< os_release)) audit(AUDIT_OS_NOT, 'Ubuntu 14.04 / 16.04 / 18.04 / 20.04 / 22.04 / 24.04 / 26.04', 'Ubuntu ' + os_release);
if ( ! get_kb_item('Host/Debian/dpkg-l') ) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Ubuntu', cpu);

var pkgs = [
    {'osver': '14.04', 'pkgname': 'bind9', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'bind9-host', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'bind9utils', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'dnsutils', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'host', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'libbind9-90', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'libdns100', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'libisc95', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'libisccc90', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'libisccfg90', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'liblwres90', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '14.04', 'pkgname': 'lwresd', 'pkgver': '1:9.9.5.dfsg-3ubuntu0.19+esm15', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'bind9', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'bind9-host', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'bind9utils', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'dnsutils', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'host', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libbind9-140', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libdns-export162', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libdns162', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libirs-export141', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libirs141', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libisc-export160', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libisc160', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libisccc-export140', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libisccc140', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libisccfg-export140', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'libisccfg140', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'liblwres141', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '16.04', 'pkgname': 'lwresd', 'pkgver': '1:9.10.3.dfsg.P4-8ubuntu1.19+esm11', 'cves': ['CVE-2025-8677', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'bind9', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'bind9-host', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'bind9utils', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'dnsutils', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libbind9-160', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libdns-export1100', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libdns1100', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libirs-export160', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libirs160', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libisc-export169', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libisc169', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libisccc-export160', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libisccc160', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libisccfg-export160', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'libisccfg160', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '18.04', 'pkgname': 'liblwres160', 'pkgver': '1:9.11.3+dfsg-1ubuntu1.19+esm6', 'cves': ['CVE-2025-8677', 'CVE-2025-40778', 'CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19666', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274']},
    {'osver': '20.04', 'pkgname': 'bind9', 'pkgver': '1:9.18.30-0ubuntu0.20.04.2+esm3', 'cves': ['CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-10822', 'CVE-2026-11331', 'CVE-2026-11622', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '20.04', 'pkgname': 'bind9-dnsutils', 'pkgver': '1:9.18.30-0ubuntu0.20.04.2+esm3', 'cves': ['CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-10822', 'CVE-2026-11331', 'CVE-2026-11622', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '20.04', 'pkgname': 'bind9-host', 'pkgver': '1:9.18.30-0ubuntu0.20.04.2+esm3', 'cves': ['CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-10822', 'CVE-2026-11331', 'CVE-2026-11622', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '20.04', 'pkgname': 'bind9-libs', 'pkgver': '1:9.18.30-0ubuntu0.20.04.2+esm3', 'cves': ['CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-10822', 'CVE-2026-11331', 'CVE-2026-11622', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '20.04', 'pkgname': 'bind9-utils', 'pkgver': '1:9.18.30-0ubuntu0.20.04.2+esm3', 'cves': ['CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-10822', 'CVE-2026-11331', 'CVE-2026-11622', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '20.04', 'pkgname': 'bind9utils', 'pkgver': '1:9.18.30-0ubuntu0.20.04.2+esm3', 'cves': ['CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-10822', 'CVE-2026-11331', 'CVE-2026-11622', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '20.04', 'pkgname': 'dnsutils', 'pkgver': '1:9.18.30-0ubuntu0.20.04.2+esm3', 'cves': ['CVE-2026-1519', 'CVE-2026-10723', 'CVE-2026-10822', 'CVE-2026-11331', 'CVE-2026-11622', 'CVE-2026-11721', 'CVE-2026-13204', 'CVE-2026-13321', 'CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '22.04', 'pkgname': 'bind9', 'pkgver': '1:9.18.39-0ubuntu0.22.04.7', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '22.04', 'pkgname': 'bind9-dnsutils', 'pkgver': '1:9.18.39-0ubuntu0.22.04.7', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '22.04', 'pkgname': 'bind9-host', 'pkgver': '1:9.18.39-0ubuntu0.22.04.7', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '22.04', 'pkgname': 'bind9-libs', 'pkgver': '1:9.18.39-0ubuntu0.22.04.7', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '22.04', 'pkgname': 'bind9-utils', 'pkgver': '1:9.18.39-0ubuntu0.22.04.7', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '22.04', 'pkgname': 'bind9utils', 'pkgver': '1:9.18.39-0ubuntu0.22.04.7', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '22.04', 'pkgname': 'dnsutils', 'pkgver': '1:9.18.39-0ubuntu0.22.04.7', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '24.04', 'pkgname': 'bind9', 'pkgver': '1:9.18.39-0ubuntu0.24.04.8', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '24.04', 'pkgname': 'bind9-dnsutils', 'pkgver': '1:9.18.39-0ubuntu0.24.04.8', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '24.04', 'pkgname': 'bind9-host', 'pkgver': '1:9.18.39-0ubuntu0.24.04.8', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '24.04', 'pkgname': 'bind9-libs', 'pkgver': '1:9.18.39-0ubuntu0.24.04.8', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '24.04', 'pkgname': 'bind9-utils', 'pkgver': '1:9.18.39-0ubuntu0.24.04.8', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '24.04', 'pkgname': 'bind9utils', 'pkgver': '1:9.18.39-0ubuntu0.24.04.8', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '24.04', 'pkgname': 'dnsutils', 'pkgver': '1:9.18.39-0ubuntu0.24.04.8', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-77119', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '26.04', 'pkgname': 'bind9', 'pkgver': '1:9.20.24-1ubuntu0.4', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19668', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-76163', 'CVE-2026-77119', 'CVE-2026-77692', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '26.04', 'pkgname': 'bind9-dnsutils', 'pkgver': '1:9.20.24-1ubuntu0.4', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19668', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-76163', 'CVE-2026-77119', 'CVE-2026-77692', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '26.04', 'pkgname': 'bind9-host', 'pkgver': '1:9.20.24-1ubuntu0.4', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19668', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-76163', 'CVE-2026-77119', 'CVE-2026-77692', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '26.04', 'pkgname': 'bind9-libs', 'pkgver': '1:9.20.24-1ubuntu0.4', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19668', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-76163', 'CVE-2026-77119', 'CVE-2026-77692', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']},
    {'osver': '26.04', 'pkgname': 'bind9-utils', 'pkgver': '1:9.20.24-1ubuntu0.4', 'cves': ['CVE-2026-19033', 'CVE-2026-19662', 'CVE-2026-19666', 'CVE-2026-19667', 'CVE-2026-19668', 'CVE-2026-19941', 'CVE-2026-75029', 'CVE-2026-76163', 'CVE-2026-77119', 'CVE-2026-77692', 'CVE-2026-78301', 'CVE-2026-80274', 'CVE-2026-81563', 'CVE-2026-81736']}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var osver = NULL;
  var pkgname = NULL;
  var pkgver = NULL;
  if (!empty_or_null(package_array['osver'])) osver = package_array['osver'];
  if (!empty_or_null(package_array['pkgname'])) pkgname = package_array['pkgname'];
  if (!empty_or_null(package_array['pkgver'])) pkgver = package_array['pkgver'];
  if (!empty_or_null(package_array['cves'])) cves = package_array['cves'];
  if (osver && pkgname && pkgver) {
    if (deb_check(release:osver, prefix:pkgname, reference:pkgver, cves:cves)) flag++;
  }
}

if (flag)
{
  var extra = '';
  extra += ubuntu_report_get();
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : extra
  );
  exit(0);
}
else
{
  var tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'bind9 / bind9-dnsutils / bind9-host / bind9-libs / bind9-utils / etc');
}