Photon OS 4.0: Coredns PHSA-2026-4.0-1038

An update of the coredns package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Coredns PHSA-2026-5.0-0869

An update of the coredns package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0869. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-33190

creationtimestamp| type| source ---|---|--- 2026-05-05 21:42:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml55pzrfbp2k...

CVE-2026-33190

CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports DoT, DoH, DoH3, DoQ, and gRPC because it trusts the transport writer's TsigStatus instead of performing verification itself. The DoH and DoH3 writer's TsigStatus...

coredns-1.14.3-1.1 on GA media (moderate)

coredns-1.14.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10673-1 Rating: moderate Cross-References: CVE-2026-27140 CVE-2026-27144 CVE-2026-32282 CVE-2026-33190 CVSS scores: CVE-2026-27140 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-27144 SUSE : 5.5...

CVE-2026-33190 vulnerabilities

Vulnerabilities for packages: k8sgateway-fips, eks-distro, juicefs, kubernetes-dns-node-cache-fips, eks-distro-fips, k8sgateway, kubernetes-dns-node-cache...