Updated libgd packages fix a security vulnerability

A vulnerability was discovered in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a malformed GIF file is processed...

bind: BIND: DNS cache poisoning via malformed zone insertion

A flaw was found in BIND, a widely used Domain Name System DNS software. A remote attacker could exploit this by introducing a specially crafted, malformed DNS zone into an authoritative BIND server. This action could cause the server to incorrectly delegate authority for parts of its own...

ALPINE-CVE-2026-19666

On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1...

CVE-2026-78301

A flaw was found in BIND, a widely used Domain Name System DNS software. A remote attacker could exploit this by introducing a specially crafted, malformed DNS zone into an authoritative BIND server. This action could cause the server to incorrectly delegate authority for parts of its own...

UBUNTU-CVE-2026-78301

A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server e.g., via zone transfer, queries for names inside the configured zone then lose authoritative status and return an...

CVE-2026-19666

On a resolver configured to use dns64, if an applicable answer from the authoritative server is malformed in a specific way, the resolver named process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1...

DEBIAN-CVE-2026-89898

In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...

CVE-2026-89898

In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...

CVE-2026-89898 media: cec: extron-da-hd-4k-plus: add sanity check

In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...

EUVD-2026-80388

On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured, can send malformed messages that cause the Pimsm agent to terminate unexpectedly. The Pimsm agent is automatically...

EUVD-2026-80066

On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event...

CVE-2026-73460

On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event...

CVE-2026-89898: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...

openSUSE 16 Security Update : cups-filters (openSUSE-SU-2026:21850-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21850-1 advisory. Changes in cups-filters: - CVE-2026-64611: Fixed Infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field. A user who...

TencentOS Server 4: samba (TSSA-2026:1007)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1007 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-89898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed. CVE-2026-89898 Note that...

Debian dsa-6502 : mkvtoolnix - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6502 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6502-1 [email protected] https://www.debian.org/security/ Moritz...

SUSE SLES12: NetworkManager-devel / libnm-glib-vpn1 / libnm-glib4 / libnm-util2 / etc (SUSE-SU-2026:4181-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4181-1 advisory. - CVE-2025-9615: avoid non-admin user using other users' certificate bsc1257359. - CVE-2026-10805: Local privilege escalation via...

EUVD-2026-79215

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

EUVD-2026-79211

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...