4074 matches found
kernel: net: phylink: add lock for serializing concurrent pl->phydev writes with resolver
A flaw was found in the Linux kernel’s phylink subsystem: when phylinkresolve executes while pl-statemutex is held, it may acquire pl-phydev-lock out of order relative to other paths phylinkbringupphy or phylinkdisconnectphy that acquire pl-phydev-lock prior to pl-statemutex. This lock inversion...
AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value
CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...
GHSA-6475-R3VJ-M8VF AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value
CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...
USN-7047-1: libvirt vulnerabilities
It was discovered that libvirt parsed user-provided XML files before performing ACL checks. An attacker could possibly use this issue to cause libvirt to consume memory, resulting in a denial of service. CVE-2025-12748 It was discovered that libvirt incorrectly handled permissions on external...
PT-2026-3409
CVSSv3.1 Rating: 3.7 LOW Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement h...
CVE-2019-16791
In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy...
Knot Resolver: undisclosed vulnerability (ZAI-2026-LGVEF6)
Not disclosed. Details are not yet publicly disclosed...
Unbound: undisclosed vulnerability (ZAI-2026-HD7NUF)
Not disclosed. Details are not yet publicly disclosed...
iOS resolver: undisclosed vulnerability (ZAI-2026-IIKU0S)
Not disclosed. Details are not yet publicly disclosed...
Knot Resolver: undisclosed vulnerability (ZAI-2026-TEBUJT)
Not disclosed. Details are not yet publicly disclosed...
Android resolver: undisclosed vulnerability (ZAI-2026-ZETKG4)
Not disclosed. Details are not yet publicly disclosed...
glibc resolver: undisclosed vulnerability (ZAI-2026-TJS14X)
Not disclosed. Details are not yet publicly disclosed...
Knot Resolver: undisclosed vulnerability (ZAI-2026-WUGCCH)
Not disclosed. Details are not yet publicly disclosed...
PT-2026-27770
Name of the Vulnerable Software and Affected Versions BIND versions 9.11.0 through 9.16.50 BIND versions 9.18.0 through 9.18.46 BIND versions 9.20.0 through 9.20.20 BIND versions 9.21.0 through 9.21.19 BIND versions 9.11.3-S1 through 9.16.50-S1 BIND versions 9.18.11-S1 through 9.18.46-S1 BIND...
PT-2026-27772
Name of the Vulnerable Software and Affected Versions BIND versions 9.20.0 through 9.20.20 BIND versions 9.21.0 through 9.21.19 BIND versions 9.20.9-S1 through 9.20.20-S1 Description A specially crafted domain can be used to cause a memory leak in a BIND resolver by querying this domain. The issu...
musl libc resolver: undisclosed vulnerability (ZAI-2026-OPT0AL)
Not disclosed. Details are not yet publicly disclosed...
macOS resolver: undisclosed vulnerability (ZAI-2026-41WLU0)
Not disclosed. Details are not yet publicly disclosed...
Knot Resolver: undisclosed vulnerability (ZAI-2026-QWNN3N)
Not disclosed. Details are not yet publicly disclosed...