openSUSE 16 Security Update : dnsdist (openSUSE-SU-2026:21533-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21533-1 advisory. Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.htmlchange-1.9.15 - https://www.dnsdist.org/changelog.htmlchange-1.9....

dnsdist-2.0.7-1.1 on GA media (moderate)

dnsdist-2.0.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11411-1 Rating: moderate Cross-References: CVE-2026-40011 CVE-2026-40208 CVE-2026-40209 CVE-2026-40210 CVE-2026-40211 CVE-2026-42004 CVE-2026-42005 CVSS scores: CVE-2026-40011 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N...

CVE-2026-40211

creationtimestamp| type| source ---|---|--- 2026-06-25 14:06:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4lztjlwy2f...

DEBIAN-CVE-2026-40211

An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memo...