Skip to content
OpenAdvisories
High ELSA-2026-49836 1 CVE

Important: ldns security update (Oracle Linux 10)

Published Aug 3, 2026 · Updated Aug 3, 2026

Ecosystem: Oracle Linux

Summary

[1.8.3-18.1]
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
query-response matching (RHEL-210690)

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 10 ldns 0:1.8.3-18.el10_2.1
Oracle Linux · 10 ldns-devel 0:1.8.3-18.el10_2.1
Oracle Linux · 10 ldns-doc 0:1.8.3-18.el10_2.1
Oracle Linux · 10 ldns-utils 0:1.8.3-18.el10_2.1
Oracle Linux · 10 perl-ldns 0:1.8.3-18.el10_2.1
Oracle Linux · 10 python3-ldns 0:1.8.3-18.el10_2.1

Vulnerabilities 1

  • High 8.2
    CVE-2026-10846

    Insufficient verification that responses belong to a query

    NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the questio…

    NLnet Labs ldns ldns ldns Debian Ubuntu Azure Linux