Skip to content
OpenAdvisories
High ELSA-2026-68786 1 CVE

Important: perl-Net-DNS security update (Oracle Linux 9)

Published Sep 17, 2026 · Updated Sep 17, 2026

Ecosystem: Oracle Linux

Summary

[1.29-6.1]
- Fix CVE-2026-81928: Unbounded recursion when re-encoding message with
misplaced TSIG
- Resolves: RHEL-256275

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 perl-Net-DNS 0:1.29-6.el9_8.1
Oracle Linux · 9 perl-Net-DNS-Nameserver 0:1.29-6.el9_8.1

Vulnerabilities 1

  • High 7.5
    CVE-2026-81928

    Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record

    Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. sig_data signs a message by re-encoding it, and removes TSIG records only from the additional section. …

    libnet-dns-perl libnet-dns-perl Debian Ubuntu