modemmanager

Reachable assertion in Cell Broadcast encoding parse causes denial of service

GCVE Database

Modemmanager: Reachable assertion in Cell Broadcast encoding parse causes denial of service (CVE-2026-95622)

ghostscript

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. It is suggested to install a patch to address this issue. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. (CVE-2026-103226)

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)

* bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)

* bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

https://access.redhat.com/errata/RHSA-2026:75767

https://access.redhat.com/security/updates/classification/#important

2535435

2535466

2535477

Canonical URL

Red Hat Security Advisory: bind security update

This security update provides a functional equivalent of RHSA-2026:75575.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:75575.

SUSE ratings

URL of this CSAF notice

SUSE CVE CVE-2026-90947 page

SUSE CVE CVE-2026-90948 page

SUSE CVE CVE-2026-92248 page

SUSE CVE CVE-2026-97185 page

security update for gimp

This security update provides a functional equivalent of RHSA-2026:75580.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:75580.

SUSE CVE CVE-2026-96512 page

security update for sudo

This update for suseconnect-ng fixes the following issue:

- Update version to 1.23.0:
 
  - Use product identifier for product migrations. (bsc#1268596)
  - Switch to using go1.26-openssl as the default Go version to 
  install to support building the package (jsc#SCC-843, bsc#1268900).
  - Fix flag parsing so that unknown flags or options are flagged as an 
  error and the usage message is displayed. (bsc#1159776)
  - InstallReleasePackage interactive/noninteractive handling should 
  be consistent with DistUpgrade (bsc#1267478).
  - Add new optional rpm_packages collector, disabled by default, to 
  collect list of installed SUSE vendored RPM packages. (jsc#TEL-298)
  - Allow deregsiter when subscribed regcode has expired (bsc#1270392, 
  jsc#865)

Security update for suseconnect-ng

Description

Technical Details

Community Reviews

Actions

External Links

Need more coverage?

Latest Threats

Check if your credentials are on the dark web

Lead Pen Test Professional