Fedora 46 : bind / bind-dyndb-ldap (2026-56974571ee)

The remote Fedora 46 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-56974571ee advisory. Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git...

CVE-2026-98604

In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when learning local endpoint struct ovpnbind is published through peer-bind with RCU, but local endpoint learning updates bind-local in place under peer-lock. UDP TX reads the field without that lock. In...

CVE-2026-98603

In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when clearing stale local source The UDP output fallback clears bind-local in place when the remembered source address is no longer usable. The bind is RCU-published and read locklessly by concurrent TX, so an...

PT-2026-117000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the mtk drm bind function within the drm/mediatek component. When a device is not the mmsys master, the function takes a reference to the disp-mutex device usi...

PT-2026-116677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO layer where hci bind cis and hci connect cis return an hci conn hold that is not always consumed. Specifically, when iso chan add is called, there ar...

PT-2026-116678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where the hci bind bis function fails to properly balance the parent hold. While hci conn link takes a lifetime reference to the paren...

Security update for bind (important)

openSUSE security update: security update for bind ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22049-1 Rating: important References: bsc1280430 bsc1280432 bsc1280433 bsc1280435 bsc1280436 bsc1280437 bsc1280438 bsc1280439 bsc1280440 bsc1280441...

OESA-2026-4343 bind security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

OESA-2026-4342 bind security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

OESA-2026-4340 bind security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

OESA-2026-4341 bind security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

CVE-2026-19601

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to invalidate the stored AD/LDAP bind password when other connection settings such as the server address are changed, which allows a System Console administrator to disclose the plaintext bind password ...

CVE-2026-19601 Disclosure of AD/LDAP bind password via Test Connection

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to invalidate the stored AD/LDAP bind password when other connection settings such as the server address are changed, which allows a System Console administrator to disclose the plaintext bind password ...

CVE-2026-19601

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to invalidate the stored AD/LDAP bind password when other connection settings such as the server address are changed, which allows a System Console administrator to disclose the plaintext bind password ...

EUVD-2026-102807

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to invalidate the stored AD/LDAP bind password when other connection settings such as the server address are changed, which allows a System Console administrator to disclose the plaintext bind password ...

CVE-2026-19601 Disclosure of AD/LDAP bind password via Test Connection

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to invalidate the stored AD/LDAP bind password when other connection settings such as the server address are changed, which allows a System Console administrator to disclose the plaintext bind password ...

CVE-2026-19601

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, and 11.10.x

CLSA-2026-1791226662 bind: Fix of 2 CVEs

CVE-2026-80274: fix an assertion failure in a validating resolver when a wildcard answer carries a signed NSEC3 proof and an unsigned NSEC or a signed NSEC and an unsigned NSEC3 at the same owner name; the NOQNAME proof type accepted by the validator is now recorded and used both when caching and...

PT-2026-115516

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to invalidate the stored AD/LDAP bind password when other connection settings such as the server address are changed, which allows a System Console administrator to disclose the plaintext bind password ...

CVE-2026-19601: Insertion of Sensitive Information Into Sent Data

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to invalidate the stored AD/LDAP bind password when other connection settings such as the server address are changed, which allows a System Console administrator to disclose the plaintext bind password ...