CVE-2026-11331 Potential wildcard CNAME RPZ policy bypass

An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of...

Azure Linux 3.0 Security Update: tinyxml2 (CVE-2024-50615)

The version of tinyxml2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50615 advisory. - TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that May lead to application exit, in...

CBL Mariner 2.0 Security Update: tinyxml2 (CVE-2024-50615)

The version of tinyxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50615 advisory. - TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that May lead to application exit, in...