CLSA-2026-1789577977 flatpak: Fix of CVE-2026-90616

CVE-2026-90616: fix symlink-following sandbox escape in app data dir creation and /var bind mounts...

CLSA-2026-1790003616 bind: Fix of 3 CVEs

CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in queryfind, so queryaddnoqnameproof no longer dereferences the rdataset that queryfilter64 had already returned to the message rdataset pool - CVE-2026-19667: reject negative cache records that do not fit in a dnsrdatat; a...

openssh: OpenSSH: ssh-agent allows remote execution of local operations

A flaw was found in OpenSSH's ssh-agent component. A misinteraction between agent locking and the [email protected] extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS11 tokens or utilize keys with destination...

openssh: OpenSSH: ssh-agent allows remote execution of local operations

A flaw was found in OpenSSH's ssh-agent component. A misinteraction between agent locking and the [email protected] extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS11 tokens or utilize keys with destination...

EulerOS Virtualization 2.10.0 : bind (EulerOS-SA-2026-3861)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

TencentOS Server 2: bind (TSSA-2026:1039)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1039 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

EulerOS Virtualization 2.10.1 : bind (EulerOS-SA-2026-3827)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

MGASA-2026-0422 Updated bind package fixes security vulnerabilities

Unauthenticated IXFR deltas are applied to the live zone before TSIG verification CVE-2026-19033. qpcache NOQNAME proof use-after-free crashes recursive resolver CVE-2026-19662. Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path CVE-2026-19666. Remote assertion failure via 16-bit...

Updated bind package fixes security vulnerabilities

Unauthenticated IXFR deltas are applied to the live zone before TSIG verification CVE-2026-19033. qpcache NOQNAME proof use-after-free crashes recursive resolver CVE-2026-19662. Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path CVE-2026-19666. Remote assertion failure via 16-bit...

CVE-2026-19941

creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...

CVE-2026-19668

creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:37+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...

CVE-2026-19662

creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:32+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...

EulerOS Virtualization 2.11.0 : bind (EulerOS-SA-2026-3489)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a special...

EulerOS Virtualization 2.12.1 : dhcp (EulerOS-SA-2026-3581)

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a speciall...

EulerOS 2.0 SP10 : bind (EulerOS-SA-2026-3682)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving a...

ISC BIND 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 DoS (CVE-2026-77692)

The version of ISC BIND running on the remote host is 9.20.0 through 9.20.27 or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by a vulnerability : - An attacker can cause named to abort by sending a crafted...

ISC BIND 9.18.0 < 9.20.29 / 9.18.11-S1 < 9.20.29-S1 / 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 Multiple Vulnerabilities

The version of ISC BIND running on the remote host is 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.18.11-S1 through 9.18.50-S1 and 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by multiple...

EulerOS Virtualization 2.12.1 : bind (EulerOS-SA-2026-3576)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

EulerOS Virtualization 2.11.1 : bind (EulerOS-SA-2026-3402)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a special...

ISC BIND 9.11.0 < 9.20.29 / 9.11.3-S1 < 9.20.29-S1 / 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 Multiple Vulnerabilities

The version of ISC BIND running on the remote host is 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.11.3-S1 through 9.18.50-S1 and 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by multiple vulnerabiliti...