Back Linuxsecurity

SUSE perl-Net-DNS Moderate Memory Issue Fix CVE-2026-81928 2026-4086

Linuxsecurity •LinuxSecurity Advisories • September 8, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

## This update for perl-Net-DNS fixes the following issue: * CVE-2026-81928: memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record (bsc#1278084). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4086=1 ## Package List: * Basesystem Module 15-SP7 (noarch) * perl-Net-DNS-1.14-150000.3.6.1

* CVE-2026-81928 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

* CVE-2026-81928 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* Basesystem Module 15-SP7

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves one vulnerability can now be installed.

Announcement ID: SUSE-SU-2026:4086-1 Release Date: 2026-09-08T10:22:58Z Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Security Updates Address Moderate Vulnerabilities in perl-URI and perl-Net-DNS SUSE has released updates addressing two moderate vulnerabilities in its software packages perl-URI and perl-Net-DNS. The perl-URI update resolves CVE-2026-19953, which involves non-NFC host names encoded to non-standard punycode labels due to a normalization issue. This vulnerability affects multiple SUSE Linux Enterprise products, including Server and Desktop versions. The perl-Net-DNS update fixes CVE-2026-81928, a memory exhaustion issue caused by unbounded recursion when handling TSIG records. Both vulnerabilities are rated moderate in severity, with CVE-2026-19953 having a CVSS score of 6.5 and CVE-2026-81928 scoring 7.5. Administrators are advised to apply the patches using SUSE's recommended installation methods. The updates were released on September 7 and September 8, 2026, respectively. No active exploitation has been reported for either vulnerability. 2 sources 45

Extracted Entities

SUSE perl-Net-DNS Moderate Memory Issue Fix CVE-2026-81928 2026-4086

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (1)